Skip to content
OpenAdvisories

Package · Packagist

backdrop/backdrop

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2022-42095 Public exploit

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

    backdrop/backdrop Packagist
  • Medium 4.8
    CVE-2022-42097 Public exploit

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .

    backdrop/backdrop Packagist
  • Medium 4.8
    CVE-2022-42094 Public exploit

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

    backdrop/backdrop Packagist
  • Medium 4.8
    CVE-2022-42096 Public exploit

    Cross-site Scripting in Backdrop CMS

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.

    backdrop/backdrop Packagist
  • High 7.2
    CVE-2022-42092 Public exploit

    Backdrop CMS Unrestricted File Upload vulnerability

    Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

    backdrop/backdrop Packagist