PT-2026-25530 · Unknown · Winter Cms
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Winter CMS (affected versions not specified)
Description
A security issue was identified in a Winter CMS plugin. The issue allows for unauthorized access or manipulation of the system, though specific details are not provided. No information is available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerability involves a plugin within the Winter CMS ecosystem.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Winter Cms