WinterCMS

v1.2.12 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3mo Dashboards & Home Pages

✓ No known CVEs patched

This release patches 1 known CVE

Topics

cms cms-platform laravel php winter wintercms

Summary

AI summary

Added protection against privilege escalation attack from authenticated backend users.

Full changelog

Fixed z-index on MediaManager move dropdown.
Fixed support for config properties on URL fields.
Fixed issue where dynamically extending a class to add behaviors could fail if the behavior had been added before.

Added protection against privilege escalation attack from authenticated backend users.

Moved Vite rendering to {% styles %} Twig tag instead of {% scripts %} to prevent FOUC.

Full Changelog: https://github.com/wintercms/winter/compare/v1.2.11...v1.2.12

Added protection against privilege escalation attack from authenticated backend users

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track WinterCMS

Get notified when new releases ship.

About WinterCMS

Speedy and secure content management system built on the Laravel PHP framework.