Threats tagged 'ghsa-m7jc-g4rc-jmvh'

Winter CMS versions up to and including 1.2.12 have a SQL injection vulnerability in the backend Filter widget's numberrange scope when configured with a conditions key. This flaw allows an authenticated backend user to inject arbitrary SQL via the filter's AJAX handler, potentially reading arbitrary database contents. Exploitation requires a third-party plugin to register such a filter scope; a vanilla installation is not affected. The issue is fixed in version 1.2.13.