Urgent.News

What's breaking now, across thousands of outlets.

Editions

More in Tech

GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles Vulnerability ID: GHSA-5CWR-5JXG-PCF6 CVSS Score: 8.4 Published: 2026-08-20 Winter CMS…

  • Stored XSS vulnerability in Winter CMS versions before 1.2.14
  • Attackers with backend branding or editor permissions can inject arbitrary JavaScript
  • Malicious code written to cache without sanitization, executed in other admin sessions

More from Friday 21 August →