Backdropcms Backdrop vulnerabilities

• backdropcms backdrop Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate... CVE-2026-111442 5.3 MediumOctober 16, 2026
• backdropcms backdrop Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a... CVE-2026-110907 7.5 HighOctober 15, 2026
• backdropcms backdrop Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration... CVE-2026-107914 7.8 HighOctober 9, 2026
• backdrop Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive CVE-2026-104476 8.2 HighOctober 2, 2026
• backdropcms gdpr cookies module for backdrop cms The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect... CVE-2025-71310 1.8 LowMay 26, 2026
• backdropcms backdrop cms Backdrop CMS Host Header Injection vulnerability CVE-2025-63828 6.1 MediumNovember 18, 2025
• backdropcms backdrop cms A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30. CVE-2025-44141 6.1 MediumJune 26, 2025
• backdropcms backdrop, backdrop cms +1 more An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It... CVE-2025-25063 4.4 MediumFebruary 3, 2025
• backdropcms backdrop, backdrop cms +1 more An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It... CVE-2025-25062 Public exploit 4.4 MediumFebruary 3, 2025
• backdropcms backdrop cms Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG... CVE-2024-54123 6.1 MediumNovember 29, 2024
• backdropcms backdrop Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places CVE-2024-41709 Fix available 4.8 MediumJuly 22, 2024
• backdropcms backdrop, backdrop cms +1 more Cross-site Scripting in Backdrop CMS CVE-2023-31045 Fix availableDisputed 4.8 MediumApril 24, 2023
• backdropcms backdrop cms Cross-site Scripting in Backdrop CMS CVE-2022-42095 Public exploit 4.8 MediumNovember 23, 2022
• backdropcms backdrop Cross-site Scripting in Backdrop CMS CVE-2022-42097 Public exploit 4.8 MediumNovember 22, 2022
• backdropcms backdrop Cross-site Scripting in Backdrop CMS CVE-2022-42094 Public exploit 4.8 MediumNovember 22, 2022
• backdropcms backdrop cms Cross-site Scripting in Backdrop CMS CVE-2022-42096 Public exploit 4.8 MediumNovember 21, 2022
• backdropcms backdrop cms Backdrop CMS Unrestricted File Upload vulnerability CVE-2022-42092 Public exploitDisputed 7.2 HighOctober 7, 2022
• backdropcms backdrop cms An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers... CVE-2022-34530 5.3 MediumAugust 1, 2022
• backdropcms backdrop A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1... CVE-2022-24590 5.4 MediumFebruary 15, 2022
• backdropcms backdrop A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows... CVE-2021-45268 Disputed 8.8 HighFebruary 3, 2022
• backdropcms backdrop cms An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't... CVE-2019-19900 4.8 MediumDecember 19, 2019
• backdropcms backdrop cms An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows... CVE-2019-19902 7.2 HighDecember 19, 2019
• backdropcms backdrop cms An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter... CVE-2019-19903 4.8 MediumDecember 19, 2019
• backdropcms backdrop cms An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't... CVE-2019-19901 4.8 MediumDecember 19, 2019
• backdropcms backdrop Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output... CVE-2019-14769 6.1 MediumAugust 8, 2019
• backdropcms backdrop core In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the... CVE-2019-14770 6.1 MediumAugust 8, 2019
• backdropcms backdrop cms Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site... CVE-2019-14771 Disputed 9.8 CriticalAugust 8, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• backdropcms backdrop cms Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in... CVE-2018-1000813 4.8 MediumDecember 20, 2018