Skip to content
OpenAdvisories

Package · Packagist

backdrop/backdrop

8 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2022-42092 Public exploit

    Backdrop CMS Unrestricted File Upload vulnerability

    Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.