PT-2026-83654

Impact Affected versions of Winter CMS render the search query parameter without HTML encoding inside a block in the backend Table widget partial modules/backend/widgets/table/partials/ table.php: php value="" is an HTML raw-text context, so the surrounding value="…" attribute quoting is not a...