Executive brief
Winter CMS Stored XSS through Backend ColorPicker FormWidget
Affected products
- Packagist winter/wn-backend-module
Junglewise Threat Intelligence
CVE-2023-52084: Winter CMS Stored XSS through Backend ColorPicker FormWidget
CVE-2023-52084 · Severity: low · CVSS 3.1 · Published 2023-12-28
Technologies: winter/wn-backend-module (Packagist). Vendors: Packagist.
Related threats
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter wid
- Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the
- Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated