CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2022-24590

BackdropCMS v1.21.1 is affected by a stored cross-site scripting (XSS) vulnerability in the Add Link function. The root cause is insufficient validation of client-side data, enabling attackers to execute arbitrary web scripts/HTML when the vulnerable entry is processed. Sources corroborate the is...