[MEDIUM] Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

PKSA-rw8y-31yz-4tck CVE-2026-32593 GHSA-m7jc-g4rc-jmvh

Affected package: winter/wn-backend-module

Affected version: <=1.2.12

Reported by:
GitHub