PT-2026-25530 · Unknown · Winter Cms

·

CVE-2026-32593

·

Published

2026-03-14

·

Updated

2026-08-27

CVSS v3.1

5.9

Medium

VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Winter CMS (affected versions not specified)
Description A security issue was identified in a Winter CMS plugin. The issue allows for unauthorized access or manipulation of the system, though specific details are not provided. No information is available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerability involves a plugin within the Winter CMS ecosystem.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-32593
GHSA-M7JC-G4RC-JMVH

Affected Products

Winter Cms