CVE-2026-126061

Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Backend\Controllers\MyAccount controller inherits the FormController actions create, update, and preview while declaring an empty $requiredPermissions array, and formFindModelObject resolve...

CVE-2026-125338

Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, BrandSetting::renderCss and EditorSetting::renderCss store raw LESS compiler output with Cache::forever but apply striptags only to the value returned on a cache miss. The first render after saving cust...

CVE-2026-125337

Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess only to the import and export page actions, while Backend\Classes\Controller::execAjaxHandlers dispatches onImport, onImportLoadForm,...

CVE-2026-125339

Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.319 until 1.2.14, Backend\Classes\Controller::actionExists accepts public handler-shaped methods as page actions, so a top-level GET request can invoke state-changing backend AJAX handlers without a CSRF token...

CVE-2026-125340

Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the backend Table widget partial modules/backend/widgets/table/partials/table.php emits the search query parameter without HTML encoding inside a script template. A script-closing sequence in ...

CVE-2026-125341

Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue interpolates the result of ImageResizer::filterGetUrl into a single-quoted image source attribute without escaping it. In a third-party plugin that...

CVE-2026-126061 Winter CMS: My Account preview exposes another backend user's profile by record ID

Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Backend\Controllers\MyAccount controller inherits the FormController actions create, update, and preview while declaring an empty $requiredPermissions array, and formFindModelObject resolve...

CVE-2026-126061

Winter CMS (versions 1.2.13 until 1.2.14) is vulnerable to an authorization bypass in the Backend\Controllers\MyAccount controller. The controller inherits create, update, and preview actions from FormController while declaring an empty $requiredPermissions array. Because formFindModelObject() us...

CVE-2026-126061 Winter CMS: My Account preview exposes another backend user's profile by record ID

Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Backend\Controllers\MyAccount controller inherits the FormController actions create, update, and preview while declaring an empty $requiredPermissions array, and formFindModelObject resolve...

CVE-2026-126061

Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Backend\Controllers\MyAccount controller inherits the FormController actions create, update, and preview while declaring an empty $requiredPermissions array, and formFindModelObject resolve...

CVE-2026-125341

Winter CMS versions 1.1.0 through 1.2.13 are vulnerable to a Stored XSS vulnerability in the Backend iejsze묝ists::evalImageTypeValue() function. The root cause is the interpolation of results from ImageResizer::filterGetUrl() into a single-quoted src attribute without proper escaping. If a third-...

CVE-2026-125341 Winter CMS: Stored XSS through Backend List widget image columns

Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue interpolates the result of ImageResizer::filterGetUrl into a single-quoted image source attribute without escaping it. In a third-party plugin that...

CVE-2026-125341 Winter CMS: Stored XSS through Backend List widget image columns

Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue interpolates the result of ImageResizer::filterGetUrl into a single-quoted image source attribute without escaping it. In a third-party plugin that...

CVE-2026-125341

Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue interpolates the result of ImageResizer::filterGetUrl into a single-quoted image source attribute without escaping it. In a third-party plugin that...

CVE-2026-125341 Winter CMS: Stored XSS through Backend List widget image columns

Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue interpolates the result of ImageResizer::filterGetUrl into a single-quoted image source attribute without escaping it. In a third-party plugin that...

EUVD-2026-122901

Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue interpolates the result of ImageResizer::filterGetUrl into a single-quoted image source attribute without escaping it. In a third-party plugin that...

CVE-2026-125340

Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the backend Table widget partial modules/backend/widgets/table/partials/table.php emits the search query parameter without HTML encoding inside a script template. A script-closing sequence in ...

CVE-2026-125340 Winter CMS: Reflected XSS through the search query parameter in the backend Table widget

Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the backend Table widget partial modules/backend/widgets/table/partials/table.php emits the search query parameter without HTML encoding inside a script template. A script-closing sequence in ...

CVE-2026-125340 Winter CMS: Reflected XSS through the search query parameter in the backend Table widget

Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the backend Table widget partial modules/backend/widgets/table/partials/table.php emits the search query parameter without HTML encoding inside a script template. A script-closing sequence in ...

CVE-2026-125340

Winter CMS versions 1.0.420 through 1.2.14 are vulnerable to a Reflected Cross-Site Scripting (XSS) flaw in the backend Table widget (modules/backend/widgets/table/partials/_table.php). The application fails to HTML-encode the search query parameter when rendering it inside a `[removed]