All products

backdrop/backdrop

Composer · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Backdrop CMS Host Header Injection vulnerabilityCVE-2025-63828 · GHSA-FFPG-GM3H-4P5P backdrop/backdrop Composer Medium No fix reported
Cross-site Scripting in Backdrop CMSCVE-2022-42096 · GHSA-G8JW-8VPV-PV5Q backdrop/backdrop Composer Medium No fix reported
Cross-site Scripting in Backdrop CMSCVE-2022-42097 · GHSA-G9CP-9FW3-56CF backdrop/backdrop Composer Medium No fix reported
Cross-site Scripting in Backdrop CMSCVE-2022-42094 · GHSA-VCVG-G8P2-3HQR backdrop/backdrop Composer Medium No fix reported
Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain placesCVE-2024-41709 · GHSA-3WMX-48G3-X66G backdrop/backdrop Composer Medium Fix reported
Cross-site Scripting in Backdrop CMSCVE-2023-31045 · GHSA-3862-C622-V4FP backdrop/backdrop Composer Medium Fix reported
Backdrop CMS Unrestricted File Upload vulnerabilityCVE-2022-42092 · GHSA-33C9-RPPF-M7FQ backdrop/backdrop Composer High No fix reported
Cross-site Scripting in Backdrop CMSCVE-2022-42095 · GHSA-58RJ-W2QF-QJG7 backdrop/backdrop Composer Medium No fix reported