CVE-2022-24590

BackdropCMS v1.21.1 is affected by a stored cross-site scripting (XSS) vulnerability in the Add Link function. The root cause is insufficient validation of client-side data, enabling attackers to execute arbitrary web scripts/HTML when the vulnerable entry is processed. Sources corroborate the is...