Latest Backdropcms Vulnerabilities

● CVE-2023-31045
** DISPUTED ** A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
Backdropcms Backdrop<1.24.2
● CVE-2012-10004
A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basic_cart_checkout_form_submit of the file basic_cart.cart.inc. The...
Backdropcms Basic Cart<1.x-1.1.1
<1.x-1.1.1
● CVE-2022-42097
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .
Backdropcms Backdrop=1.23.0
● CVE-2022-42094
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.
Backdropcms Backdrop=1.23.0
● CVE-2022-42096
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.
Backdropcms Backdrop Cms=1.23.0
● CVE-2022-42092
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution.
Backdropcms Backdrop Cms=1.22.0
● CVE-2022-34530
An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.
Backdropcms Backdrop Cms<=1.22.0
● CVE-2022-24590
A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML.
Backdropcms Backdrop=1.21.1
● CVE-2021-45268
** DISPUTED ** A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a...
Backdropcms Backdrop=1.20.0
=1.20.0
● CVE-2019-19901
Backdropcms Backdrop Cms>=1.13.0<1.13.5
Backdropcms Backdrop Cms>=1.14.0<1.14.2
● CVE-2019-19903
Backdropcms Backdrop Cms>=1.13.0<1.13.5
Backdropcms Backdrop Cms>=1.14.0<1.14.2
● CVE-2019-19902
An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or command line. It does no...
Backdropcms Backdrop Cms>=1.13.0<1.13.5
Backdropcms Backdrop Cms>=1.14.0<1.14.2
● CVE-2019-19900
Backdropcms Backdrop Cms>=1.13.0<1.13.5
Backdropcms Backdrop Cms>=1.14.0<1.14.2
● CVE-2019-14770
In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged in and uses the searc...
Backdropcms Backdrop Core>=1.12.0<1.12.8
Backdropcms Backdrop Core>=1.13.0<1.13.3
● CVE-2019-14769
Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created by administrators. An attacker could potentially craft a spec...
Backdropcms Backdrop>=1.12.0<1.12.8
Backdropcms Backdrop>=1.13.0<1.13.3
● CVE-2019-14771
Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded a...
Backdropcms Backdrop Cms>=1.12.0<1.12.8
Backdropcms Backdrop Cms>=1.13.0<1.13.3
● CVE-2019-11358
A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the `extend` function could lead to modifying objects up the prototype chain, including the global Object. A crafted J...
redhat/ansible-tower<0:3.5.2-1.el7a
redhat/cfme<0:5.10.9.1-1.el7cf
redhat/cfme-amazon-smartstate<0:5.10.9.1-1.el7cf
redhat/cfme-appliance<0:5.10.9.1-1.el7cf
redhat/cfme-gemset<0:5.10.9.1-1.el7cf
redhat/ovirt-ansible-hosted-engine-setup<0:1.0.23-1.el7e
and 267 more
● CVE-2018-1000813
Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript...
Backdropcms Backdrop Cms<=1.11.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203