CVE-2023-31045

Backdrop CMS

CVE-2024-54123

Backdrop CMS versions prior to 1.28.4 and 1.29.x prior to 1.29.2 are vulnerable to Cross-Site Scripting (XSS) . The root cause is a flaw in text formatting that allows the use of SVG markup ; if the SVG tag is permitted for a text format, an attacker can inject malicious scripts via an SVG docume...