Headline
GHSA-vcvg-g8p2-3hqr: Cross-site Scripting in Backdrop CMS
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the ‘Card’ content.
Cross-site Scripting in Backdrop CMS
Moderate severity GitHub Reviewed Published Nov 22, 2022 • Updated Nov 22, 2022
Related news
CVE-2022-42094: [CVE-2022–42094]Backdrop-XSS-at-Cards - GrimTheRipper - Medium
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.