339 matches found
EUVD-2023-30089
Malicious code in bioql PyPI...
EUVD-2025-7814
Malicious code in bioql PyPI...
EUVD-2024-2241
Malicious code in bioql PyPI...
EUVD-2022-7344
Malicious code in bioql PyPI...
EUVD-2025-11964
Malicious code in bioql PyPI...
EUVD-2025-19204
Malicious code in bioql PyPI...
EUVD-2022-6998
Malicious code in bioql PyPI...
CVE-2025-44141
A Cross-Site Scripting XSS vulnerability exists in the node creation form of Backdrop CMS 1.30...
CVE-2025-44141
A Cross-Site Scripting XSS vulnerability exists in the node creation form of Backdrop CMS 1.30...
CVE-2025-44141
A Cross-Site Scripting XSS vulnerability exists in the node creation form of Backdrop CMS 1.30...
CVE-2025-44141
A Cross-Site Scripting XSS vulnerability exists in the node creation form of Backdrop CMS 1.30...
CVE-2025-44141
CVE-2025-44141 affects Backdrop CMS 1.30 with a Cross-Site Scripting (XSS) flaw in the node creation form. The available documents describe the vulnerability and its exposure, but do not provide root-cause details, affected files beyond the node creation form, or concrete remediation steps. Explo...
CVE-2025-44141
A Cross-Site Scripting XSS vulnerability exists in the node creation form of Backdrop CMS 1.30...
PT-2025-26999 · Unknown · Backdrop Cms
Name of the Vulnerable Software and Affected Versions: Backdrop CMS version 1.30 Description: A Cross-Site Scripting XSS issue exists in the node creation form. Recommendations: For Backdrop CMS version 1.30, update to a version that includes a fix for this issue...
CVE-2025-44141
A Cross-Site Scripting XSS vulnerability exists in the node creation form of Backdrop CMS 1.30...
Backdrop CMS 安全漏洞
Backdrop CMS is a content management system CMS from Backdrop CMS open source. A security vulnerability exists in Backdrop CMS version 1.30, which stems from a cross-site scripting vulnerability in the node creation form...
CVE-2024-54123
Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format...
CVE-2023-31045
A stored Cross-site scripting XSS issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via the name parameter. When a user is editing any content type e.g., page, post, or card as an admin, the stored XSS payload is execute...
CVE-2023-26265
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borgpreprocesspage in the file template.php does not properly sanitize incoming path arguments before using them...