CVE-2019-19900

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content creation interface. An attacker could potentially craft a specialized content type name, then have an editor execute...

CVE-2019-19900

Summary: Backdrop CMS is affected by a reflected/stored-XSS issue in the content-creation interface due to insufficient filtering of content type names. Affected versions are Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. An attacker must have a role with the “Administer content type...

PT-2019-15994

Name of the Vulnerable Software and Affected Versions Backdrop CMS versions 1.13.x through 1.13.4 Backdrop CMS versions 1.14.x through 1.14.1 Description An issue was discovered that allows for potential XSS attacks when displaying content type names in the content creation interface. The softwar...

CVE-2019-19900: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content creation interface. An attacker could potentially craft a specialized content type name, then have an editor execute...