CVE-2023-26265

2023-02-2100:00:00

mitre

www.cve.org

borg theme

backdrop cms

path arguments

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

JSON

The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borg_preprocess_page in the file template.php does not properly sanitize incoming path arguments before using them.