Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the actionExists process. An attacker can cause destructive changes to system state, such as truncating logs, resetting settings, altering user states, or deleting templates, by tricking an...

PT-2026-83659

Impact Affected versions of Winter CMS allow a backend AJAX handler to be invoked by a plain top-level GET navigation with no CSRF token. BackendClassesController::actionExists accepted any public method on a controller as a page action, so handler-shaped names were never reserved from URL...