[HIGH] Winter: Stored XSS through Brand Settings custom styles

PKSA-8fbj-xdrm-f43z CVE-2026-32257 GHSA-v7cf-8gh9-gxmj

Affected package: winter/wn-backend-module

Affected version: <=1.2.12

Reported by:
GitHub