CVE-2025-27823

CVE-2025-27823 concerns the Mail Disguise module for Backdrop CMS, prior to version 1.x-1.0.5. The issue arises from insufficient validation of the data attribute value on links, which can enable a Cross Site Scripting (XSS) vulnerability if an attacker can insert anchor elements containing data ...