p PatchFirst

CVE-2022-42095

CVE-2022-42095

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

CVSS 4.8 · Medium · EPSS 2.2% · Public exploit

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • backdrop/backdrop Packagist

    Versions
    • 1.13.2-rc1
    • 1.13.2-rc2
    • 1.17.3
    • 1.18.3
    • 1.19.1
    • 1.20.3
    • 1.21.0
    • 1.21.1
    • 1.21.3
    • 1.21.4
    • 1.22.1
    • 1.22.2
    Affected ranges
    • ECOSYSTEM: ≤ 1.23.0

    No fix published

Original sources

Check your server →