Cross-site Scripting in Backdrop CMS

MEDIUM 4.8CVE-2022-42095 · GHSA-58rj-w2qf-qjg7 · Published 23/11/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
backdrop/backdrop Packagist	`≤ 1.23.0`	No fix yet
backdrop cms backdropcms	`= 1.23.0`	No fix yet

Description

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

NVD description

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.