Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 1.8%	CVE-2024-29686winter · n/a High7.2EPSS 1.8%2024-03-29CVE Database V5CVE-2024-29686 Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components. NOTE: the vendor disputes this because the payload could only be entered by a trusted user, such as the owner of the server that hosts Winter CMS, or a developer working for them. EPSS 1.8%Vulnerability	CVE Database V5	2024-03-29

Page 1 of 1