CVE-2023-26265

The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borgpreprocesspage in the file template.php does not properly sanitize incoming path arguments before using them...

PT-2023-20574

Name of the Vulnerable Software and Affected Versions Backdrop CMS Borg theme versions prior to 1.1.19 Description The issue arises from insufficient sanitization of path arguments passed via a URL. Specifically, the function borg preprocess page in the file template.php does not properly sanitiz...