Skip to content

Winter CMS has Stored Cross-site Scripting (XSS) in Asset Manager

Low severity GitHub Reviewed Published Feb 4, 2026 in wintercms/winter • Updated Feb 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts