Backdrop Security Vulnerabilities and Issues — Backdrop CVE List

Lucene search

BackdropcmsBackdrop

4 matches found

CVE•added 2022/02/15 4:15 p.m.•75 views

CVE-2022-24590

A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML.

5.4CVSS5.3AI score0.00195EPSS

CVE•added 2022/11/22 1:15 p.m.•68 views

CVE-2022-42097

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .

4.8CVSS4.8AI score0.00393EPSS

CVE•added 2022/11/22 1:15 p.m.•64 views

CVE-2022-42094

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

4.8CVSS4.8AI score0.17366EPSS

CVE•added 2022/02/03 10:15 p.m.•55 views

CVE-2021-45268

A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session co...

8.8CVSS9.1AI score0.00307EPSS