winter/wn-backend-module

CVE-2026-125340: cross-site scripting (XSS) en winter/wn-backend-module

CVE-2026-125340 · GHSA-HQ84-X37P-J6Q5

CVE-2026-125339: falsificación de peticiones (CSRF) en winter/wn-backend-module

CVE-2026-125339 · GHSA-P2CH-C2C3-4XM5

CVE-2026-125338: cross-site scripting (XSS) en winter/wn-backend-module

CVE-2026-125338 · GHSA-5CWR-5JXG-PCF6

CVE-2026-125337: falta de autorización en winter/wn-backend-module

CVE-2026-125337 · GHSA-FM29-4MQ3-PHG6

CVE-2026-126061: acceso a datos de otros usuarios (IDOR) en winter/wn-backend-module

CVE-2026-126061 · GHSA-MPMW-F6H6-3G26

CVE-2026-125341: cross-site scripting (XSS) en winter/wn-backend-module

CVE-2026-125341 · GHSA-7MPF-4465-7FC2

CVE-2026-63179: recorrido de rutas (path traversal) en winter/wn-backend-module

CVE-2026-63179 · GHSA-58FP-MCX6-7QF9

CVE-2026-54256: control de acceso inadecuado en winter/wn-backend-module

CVE-2026-54256 · GHSA-3277-H8G9-QJ5F

CVE-2026-35445: vulnerabilidad en winter/wn-backend-module

CVE-2026-35445 · GHSA-J5JQ-CR68-V2XX

CVE-2026-32593: inyección SQL en winter/wn-backend-module

CVE-2026-32593 · GHSA-M7JC-G4RC-JMVH

CVE-2026-32258: cross-site scripting (XSS) en winter/wn-backend-module

CVE-2026-32258 · GHSA-VGP4-2FC4-QFF2

CVE-2026-32257: cross-site scripting (XSS) en winter/wn-backend-module

CVE-2026-32257 · GHSA-V7CF-8GH9-GXMJ

CVE-2026-27591: control de acceso inadecuado en winter/wn-backend-module

CVE-2026-27591 · GHSA-PGPF-M8M4-6CG6

CVE-2023-52085: recorrido de rutas (path traversal) en winter/wn-backend-module

CVE-2023-52085 · GHSA-2X7R-93WW-CXRQ

CVE-2023-52084: cross-site scripting (XSS) en winter/wn-backend-module

CVE-2023-52084 · GHSA-43W4-4J3C-JX29