CVE-2026-125337

Winter CMS is a content management system built on the Laravel PHP framework.

Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess() only to the import() and export() page actions, while Backend\Classes\Controller::execAjaxHandlers() dispatches onImport(), onImportLoadForm(), onImportLoadColumnSampleForm(), onExport(), and onExportLoadForm() before those gated actions run, and the separately reachable download() action also lacks the granular export…

10. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-125337