Browse CVEs

MEDIUM 6.1 CVE-2025-63828 Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redi… Backdrop Cms No fix yet Fix from $1,6002025-11-18 MEDIUM 6.1 CVE-2025-44141 A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30. Backdrop Cms Mitigation only Fix from $1,6002025-06-26 MEDIUM 6.1 CVE-2024-54123 Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format. Backdrop Cms 1.28.4 / 1.29.2+ Fix from $1,6002024-11-29 MEDIUM 6.1 CVE-2012-10004 A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basic_cart_checko… Basic Cart 1.x-1.1.1+ Fix from $1,6002023-01-11 HIGH 7.2 CVE-2022-42092 Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispu… Backdrop Cms No fix yet Fix from $1,9502022-10-07 MEDIUM 5.3 CVE-2022-34530 An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests an… Backdrop Cms after 1.22.0 Fix from $1,6002022-08-01 MEDIUM 5.4 CVE-2022-24590 A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts o… Backdrop No fix yet Fix from $1,6002022-02-15 HIGH 8.8 CVE-2021-45268 A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on t… Backdrop No fix yet Fix from $1,9502022-02-03 HIGH 7.2 CVE-2019-19902 An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives thr… Backdrop Cms 1.13.5 / 1.14.2+ Fix from $1,9502019-12-19 CRITICAL 9.8 CVE-2019-14771 Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interface or comm… Backdrop Cms 1.12.8 / 1.13.3+ Fix from $2,3002019-08-08 MEDIUM 6.1 CVE-2019-14769 Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created by adminis… Backdrop 1.12.8 / 1.13.3+ Fix from $1,6002019-08-08 MEDIUM 6.1 CVE-2019-14770 In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript whe… Backdrop Core 1.12.8 / 1.13.3+ Fix from $1,6002019-08-08