CVE-2022-42092

Backdrop CMS 1.22.0 is affected by an Unrestricted File Upload vulnerability via the themes component that can lead to Remote Code Execution. The issue is documented across multiple sources as susceptible to exploitation, with third-party notes arguing that advanced permissions may be required. A...

CVE-2019-19902

Backdrop CMS 1.13.x (<1.13.5) and 1.14.x (