CVE-2022-42096

creationtimestamp| type| source ---|---|--- 2022-11-22 00:37:19+00:00| seen| https://t.me/cibsecurity/53287 2025-04-29 20:12:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13912 2026-07-29 12:00:56+00:00| seen| https://t.me/CVEhub/4252 2026-07-30 00:01:34+00:00| seen|...

CVE-2022-42096

Backdrop CMS 1.23.0 contains a stored XSS in Post content. Exploitation requires authenticated content-creation/administrative privileges (per sources). An attacker can inject malicious JavaScript that may be executed when posts are viewed, potentially compromising administrator sessions. Remedia...