Lucene search
+L

14 matches found

Nuclei
Nuclei
•added 2026/10/17 2:05 a.m.•81 views

Backdrop CMS version 1.23.0 - Stored Cross Site Scripting

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the 'Card' content. id: CVE-2022-42094 info: name: Backdrop CMS version 1.23.0 - Stored Cross Site Scripting author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 w...

4.8CVSS5.3AI score0.02677EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/10/17 2:05 a.m.•68 views

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Page content. id: CVE-2022-42095 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...

4.8CVSS5.3AI score0.0208EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2022-29469

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00624EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 10:30 p.m.•18 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS5.8AI score0.00624EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/15 4:15 p.m.•13 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS6.2AI score0.00624EPSS
SaveExploits1References3
NVD
NVD
•added 2022/02/15 4:15 p.m.•27 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00624EPSS
SaveExploits1References2
Prion
Prion
•added 2022/02/15 4:15 p.m.•34 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

3.5CVSS5.4AI score0.00624EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2022/02/15 3:45 p.m.•24 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/02/15 3:45 p.m.•37 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.5AI score0.00624EPSS
SaveExploits1References2
Mend
Mend
•added 2022/02/15 3:45 p.m.•8 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00624EPSS
SaveExploits1References4
CVE
CVE
•added 2022/02/15 3:45 p.m.•113 views

CVE-2022-24590

BackdropCMS v1.21.1 is affected by a stored cross-site scripting (XSS) vulnerability in the Add Link function. The root cause is insufficient validation of client-side data, enabling attackers to execute arbitrary web scripts/HTML when the vulnerable entry is processed. Sources corroborate the is...

5.4CVSS5.3AI score0.00624EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/02/15 12:00 a.m.•19 views

BackdropCMS 跨站脚本漏洞

Backdrop CMS is an open source content management system CMS. BackdropCMS suffers from a security vulnerability that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS6AI score0.00624EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/02/15 12:00 a.m.•9 views

PT-2022-16743

Name of the Vulnerable Software and Affected Versions BackdropCMS version 1.21.1 Description A stored cross-site scripting XSS issue in the Add Link function allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on the affected system...

5.4CVSS0.00624EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/15 12:00 a.m.•13 views

CVE-2022-24590: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS6.2AI score0.00624EPSS
SaveExploits1References2
Rows per page
Query Builder