CVE-2022-42097
CVE-2022-42097
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .
CVSS 4.8 · Medium · EPSS 0.9%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
backdrop/backdrop Packagist
- Versions
- 1.13.2-rc1
- 1.13.2-rc2
- 1.17.3
- 1.18.3
- 1.19.1
- 1.20.3
- 1.21.0
- 1.21.1
- 1.21.3
- 1.21.4
- 1.22.1
- 1.22.2
- Affected ranges
- ECOSYSTEM: ≤ 1.23.0
No fix published