Executive brief
Winter: CSRF through AJAX handler names reachable as backend page actions
Affected products
- Packagist winter/wn-backend-module
Junglewise Threat Intelligence
Winter: CSRF through AJAX handler names reachable as backend page actions
Severity: low · CVSS 3.1 · Published 2026-08-20
Technologies: winter/wn-backend-module (Packagist). Vendors: Packagist.
Related threats
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend FileUpload
- Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter wid
- Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the
- Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.2.12, authenticated