2 matches found
CVE-2023-26265
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borgpreprocesspage in the file template.php does not properly sanitize incoming path arguments before using them...
6.9CVSS0.00578EPSS
SaveExploits0References2
CVE-2023-26265: Improper Limitation of a Pathname to a Restricted Directory
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borgpreprocesspage in the file template.php does not properly sanitize incoming path arguments before using them...
5.3CVSS5.8AI score0.00578EPSS
SaveExploits0References3
20