İçeriğe atla
Noroxi

backdropcms kayıtları

backdropcms üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%28
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

25 kayıt
  • CVE-2019-11358
    50Planlayın

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototyp

    OrtaCVSS 6,1Kavram kanıtıEPSS %87

    jquery · jquery19 Nis 2019

  • CVE-2019-14771
    40Planlayın

    Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interfac

    KritikCVSS 9,8İstismar yokEPSS %3

    backdropcms · backdrop cms7 Ağu 2019

  • CVE-2021-45268
    36İzleyin

    A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (

    YüksekCVSS 8,8İstismar yokEPSS %2

    backdropcms · backdrop3 Şub 2022

  • CVE-2022-42092
    28İzleyin

    Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution.

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    backdropcms · backdrop cms7 Eki 2022

  • CVE-2019-19902
    28İzleyin

    An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2.

    YüksekCVSS 7,2İstismar yokEPSS %1

    backdropcms · backdrop cms19 Ara 2019

  • CVE-2019-14769
    24İzleyin

    Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created b

    OrtaCVSS 6,1İstismar yokEPSS %1

    backdropcms · backdrop7 Ağu 2019

  • CVE-2019-14770
    24İzleyin

    In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaS

    OrtaCVSS 6,1İstismar yokEPSS %1

    backdropcms · backdrop core7 Ağu 2019

  • CVE-2012-10004
    24İzleyin

    backdrop-contrib Basic Cart basic_cart.cart.inc basic_cart_checkout_form_submit cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    backdropcms · basic cart11 Oca 2023

  • CVE-2024-54123
    24İzleyin

    Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.

    OrtaCVSS 6,1İstismar yokEPSS %0

    backdropcms · backdrop cms29 Kas 2024

  • CVE-2025-44141
    24İzleyin

    A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.

    OrtaCVSS 6,1İstismar yokEPSS %0

    backdropcms · backdrop cms26 Haz 2025

  • CVE-2025-63828
    24İzleyin

    Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leadin

    OrtaCVSS 6,1İstismar yokEPSS %0

    backdropcms · backdrop cms18 Kas 2025

  • CVE-2022-24590
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web

    OrtaCVSS 5,4İstismar yokEPSS %1

    backdropcms · backdrop15 Şub 2022

  • CVE-2022-34530
    21İzleyin

    An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset re

    OrtaCVSS 5,3İstismar yokEPSS %1

    backdropcms · backdrop cms1 Ağu 2022

  • CVE-2022-42094
    20İzleyin

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

    OrtaCVSS 4,8Kavram kanıtıEPSS %3

    backdropcms · backdrop22 Kas 2022

  • CVE-2022-42096
    20İzleyin

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.

    OrtaCVSS 4,8Kavram kanıtıEPSS %2

    backdropcms · backdrop cms21 Kas 2022

  • CVE-2022-42095
    20İzleyin

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

    OrtaCVSS 4,8Kavram kanıtıEPSS %2

    backdropcms · backdrop cms22 Kas 2022

  • CVE-2022-42097
    19İzleyin

    Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    backdropcms · backdrop22 Kas 2022

  • CVE-2018-1000813
    19İzleyin

    Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Sanitization of custom class names used on bl

    OrtaCVSS 4,8İstismar yokEPSS %1

    backdropcms · backdrop cms20 Ara 2018

  • CVE-2019-19900
    19İzleyin

    An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2.

    OrtaCVSS 4,8İstismar yokEPSS %1

    backdropcms · backdrop cms19 Ara 2019

  • CVE-2019-19901
    19İzleyin

    An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2.

    OrtaCVSS 4,8İstismar yokEPSS %1

    backdropcms · backdrop cms19 Ara 2019

  • CVE-2019-19903
    19İzleyin

    An issue was discovered in Backdrop CMS 1.14.x before 1.14.2.

    OrtaCVSS 4,8İstismar yokEPSS %1

    backdropcms · backdrop cms19 Ara 2019

  • CVE-2023-31045
    19İzleyin

    A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitr

    OrtaCVSS 4,8İstismar yokEPSS %1

    backdropcms · backdrop cms24 Nis 2023

  • CVE-2024-41709
    19İzleyin

    Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places.

    OrtaCVSS 4,8İstismar yokEPSS %0

    backdropcms · backdrop22 Tem 2024

  • CVE-2025-25062
    18İzleyin

    An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3.

    OrtaCVSS 4,4Kavram kanıtıEPSS %2

    backdropcms · backdrop cms3 Şub 2025

  • CVE-2025-25063
    17İzleyin

    An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3.

    OrtaCVSS 4,4İstismar yokEPSS %0

    backdropcms · backdrop cms3 Şub 2025