PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
winter/wn-backend-module Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles Medium Risk 4.5 2 months ago 12 hours ago
winter/wn-backend-module Winter: Stored XSS through Backend List widget image columns Low Risk 2.0 2 months ago 12 hours ago
winter/wn-backend-module Winter: ImportExportController AJAX handlers bypass granular import/export permission gate High Risk 8.3 2 months ago 12 hours ago
winter/wn-backend-module Winter: Reflected XSS through the search query parameter in the backend Table widget Medium Risk 4.5 2 months ago 12 hours ago
winter/wn-backend-module Winter: My Account preview exposes another backend user's profile by record ID Medium Risk 4.3 2 months ago 12 hours ago
winter/wn-backend-module Winter: CSRF through AJAX handler names reachable as backend page actions Medium Risk 6.1 2 months ago 12 hours ago
winter/wn-backend-module Winter CMS Local File Inclusion through Server Side Template Injection Low Risk 3.3 2 years ago 2 months ago
winter/wn-backend-module Winter CMS Stored XSS through Backend ColorPicker FormWidget Low Risk 2.0 2 years ago 2 months ago
winter/wn-backend-module Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets Medium Risk 4.9 2 months ago 2 months ago
winter/wn-backend-module Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata Medium Risk 5.4 2 months ago 2 months ago
winter/wn-backend-module Winter: Authenticated backend users can bypass Users controller permission checks High Risk 8.0 3 months ago 3 months ago
winter/wn-backend-module Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax Medium Risk 5.9 3 months ago 3 months ago
winter/wn-backend-module Winter: Stored XSS through Brand Settings custom styles High Risk 8.1 3 months ago 3 months ago
winter/wn-backend-module Winter: Stored XSS through Editor Settings custom styles High Risk 8.1 3 months ago 3 months ago
winter/wn-backend-module Winter vulnerable to privilege escalation by authenticated backend users Critical 9.9 8 months ago 8 months ago
Data courtesy of OSV.dev
Page 1