Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
backdropcms backdrop vulnerabilities and exploits
(subscribe to this query)
4.8
CVSSv3
CVE-2023-31045
A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS prior to 1.24.2 allows remote malicious users to inject arbitrary web script or HTML via the name parameter. When a user is editing any content type (e.g., page, post, or card) as an admin, the ...
Backdropcms Backdrop
6.1
CVSSv3
CVE-2012-10004
A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basic_cart_checkout_form_submit of the file basic_cart.cart.inc. The manipulation leads to cross site scripting. It is possible to launch the attack...
Backdropcms Basic Cart
4.8
CVSSv3
CVE-2022-42095
Backdrop CMS version 1.23.0 exists to contain a stored cross-site scripting (XSS) vulnerability via the Page content.
Backdropcms Backdrop Cms 1.23.0
4.8
CVSSv3
CVE-2022-42094
Backdrop CMS version 1.23.0 exists to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.
Backdropcms Backdrop 1.23.0
4.8
CVSSv3
CVE-2022-42097
Backdrop CMS version 1.23.0 exists to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .
Backdropcms Backdrop 1.23.0
4.8
CVSSv3
CVE-2022-42096
Backdrop CMS version 1.23.0 exists to contain a stored cross-site scripting (XSS) vulnerability via Post content.
Backdropcms Backdrop Cms 1.23.0
7.2
CVSSv3
CVE-2022-42092
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows malicious users to Remote Code Execution.
Backdropcms Backdrop Cms 1.22.0
5.3
CVSSv3
CVE-2022-34530
An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows malicious users to enumerate usernames via password reset requests and distinct responses returned based on usernames.
Backdropcms Backdrop Cms
5.4
CVSSv3
CVE-2022-24590
A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows malicious users to execute arbitrary web scripts or HTML.
Backdropcms Backdrop 1.21.1
8.8
CVSSv3
CVE-2021-45268
A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote malicious users to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the att...
Backdropcms Backdrop 1.20.0
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
firmware
CVE-2006-4304
CVE-2024-32878
CVE-2024-31502
XSS
CVE-2024-3059
CVE-2024-33692
CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »