Lucene search
Veracode Vulnerability DatabaseVERACODE:39194HistoryFeb 10, 2023 - 6:33 a.m.
Cross-site Scripting (XSS)
2023-02-1006:33:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
cross-site scripting
backdrop
html validation
admin authenticated attacker
malicious javascript
user post viewing
0.008 Low
EPSS
Percentile
81.2%
backdrop/backdrop is vulnerable to Cross-Site Scripting (XSS). The vulnerability exist due to the lack of validation in the html elements when adding a post which allows an admin authenticated attacker to inject and execute malicious JavaScript when a user views a post.
| CPE | Name | Operator | Version |
|---|---|---|---|
| backdrop/backdrop | le | 1.22.2 | |
| backdrop/backdrop | le | 1.22.2 |
Related
osv
osv
Cross-site Scripting in Backdrop CMS
2022-11-21 21:30:14
CVE-2022-42096
2022-11-21 21:15:11
github
github
Cross-site Scripting in Backdrop CMS
2022-11-21 21:30:14
cve
cve
CVE-2022-42096
2022-11-21 21:15:11
prion
prion
Cross site scripting
2022-11-21 21:15:00
nvd
nvd
CVE-2022-42096
2022-11-21 21:15:11
nuclei
nuclei
Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)
2023-05-06 12:12:20
cvelist
cvelist
CVE-2022-42096
2022-11-21 00:00:00