CVE-2026-125338

Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, BrandSetting::renderCss() and EditorSetting::renderCss() store raw LESS compiler output with Cache::forever() but apply strip_tags() only to the value returned on a cache miss. The first render after saving custom CSS appears sanitized while priming an unsafe cache entry, and later cache hits return unsanitized output into the backend style element, allowing a user with backend.manage_branding or backend.manage_editor to cause stored cross-site scripting when another backend page renders the styles. The styles also appear on unauthenticated backend sign-in, password restore, and password reset layouts. This issue is fixed in version 1.2.14.

• CWE-79

• https://github.com/wintercms/winter/commit/c95d780ab54f3a3f74a94ae1667bf12b3c549d5d
• https://github.com/wintercms/winter/releases/tag/v1.2.14
• https://github.com/wintercms/winter/security/advisories/GHSA-5cwr-5jxg-pcf6

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-125332Forge (also called node-forge) is a native implementation of…5.9
• CVE-2026-125333Forge (also called node-forge) is a native implementation of…5.9
• CVE-2026-125334Forge (also called node-forge) is a native implementation of…5.9
• CVE-2026-125335Forge (also called node-forge) is a native implementation of…3.7
• CVE-2026-125336Forge (also called node-forge) is a native implementation of…7.4
• CVE-2026-125337Winter CMS is a content management system built on the Larav…8.3
• CVE-2026-125339Winter CMS is a content management system built on the Larav…6.1
• CVE-2026-125340Winter CMS is a content management system built on the Larav…4.5
• CVE-2026-125341Winter CMS is a content management system built on the Larav…2
• CVE-2026-125342Uninitialized resource in GPU in Google Chrome prior to 157.…4.7
• CVE-2026-125343Buffer overflow in Compositing in Google Chrome prior to 157…
• CVE-2026-125344Type confusion in V8 in Google Chrome prior to 157.0.8103.50…