Vendors / wintercms Records 19 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 6
Exploited now wintercms records in CISA KEV No wintercms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01821 · Published 2024-03-29 · No fix listed CWE-97
Priority MEDIUM 48
Winter is a free, open-source content management system.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.30166 · Published 2023-12-29 · Fixed in 1.2.4 CWE-22
Priority MEDIUM 46
Winter is a free, open-source content management system based on the Laravel PHP framework.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01366 · Published 2022-10-26 · Fixed in 1.1.10, 1.2.1 CWE-1321
Priority MEDIUM 44
Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.
CVSS 3.1 CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.00777 · Published 2026-03-11 · Fixed in 1.2.12, 1.1.12 +1 CWE-284
Priority LOW 39
Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.
CVSS 3.1 HIGH 8.5· Network · High privileges · User interaction · EPSS 0.0042 · Published 2024-12-09 · Fixed in 1.2.7, 1.1.11 +1 CWE-184
Priority LOW 27
Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.027 · Published 2023-07-07 · Fixed in 1.2.3 CWE-79
Priority LOW 24
Winter is a free, open-source content management system.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00309 · Published 2023-12-28 · Fixed in 1.2.4 CWE-79
Priority LOW 22
Winter is a free, open-source content management system.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00311 · Published 2023-12-28 · Fixed in 1.2.4 CWE-79
Priority LOW 17
Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.
CVSS 3.1 LOW 3.5· Network · High privileges · User interaction · EPSS 0.00286 · Published 2026-02-06 · Fixed in 1.2.10 CWE-79
Open these records in search → All records by CVSS severity
3 6 9 1 0
THREATIST.IORead the docs