Description
Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.
Medium · 6.1
CVE-2024-54123
EUVD-2024-52299GHSA-6gqq-xj74-45f9
Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.
Published Nov 29, 2024 · Updated Nov 29, 2024 · Assigned by mitre