Cross-site Scripting in Backdrop CMS

MEDIUM 4.8CVE-2022-42097 · GHSA-g9cp-9fw3-56cf · Published 22/11/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
backdrop/backdrop Packagist	`≤ 1.23.0`	No fix yet
backdrop backdropcms	`= 1.23.0`	No fix yet

Description

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.'s

NVD description

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .

Running one of these products? Scan your site to see whether it exposes a vulnerable version.