3 matches found
GHSA-2223-F22X-24CQ Winter: Local File Inclusion through =include directives in JavaScript asset compilation
Impact Affected versions of Winter CMS allow authenticated backend users with the cms.manageassets permission "Manage website assets - images, JavaScript files, CSS files" to disclose arbitrary files readable by the PHP process by placing an =include / =require directive in a theme JavaScript...
4.9CVSS5.7AI score0.00385EPSS
SaveExploits0References5
20