Cross-site Scripting

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Backdrop CMS version 1.23.0 - Stored Cross Site ScriptingCVE-2022-42094Backdropcms · CVSS 4.8 · 2.8% likely

   CWE-79

2. Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)CVE-2022-42096Backdropcms · CVSS 4.8 · 2.2% likely

   CWE-79

3. Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)CVE-2022-42095Backdropcms · CVSS 4.8 · 2.2% likely

   CWE-79

4. An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor i…CVE-2025-25062backdropcms · CVSS 4.4 · 1.7% likely

   CWE-79

5. Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .CVE-2022-42097Backdropcms · CVSS 4.8 · 0.9% likely

   CWE-79

6. Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created by administrators. An attacker could pot…CVE-2019-14769Backdropcms · 0.8% likely

   CWE-79

7. In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaScript when the administrator is logged…CVE-2019-14770Backdropcms · 0.8% likely

   CWE-79

8. Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Ex…CVE-2018-1000813Backdropcms · 0.7% likely

   CWE-79

9. A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML.CVE-2022-24590Backdropcms · 0.6% likely

   CWE-79

10. An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying file type descriptions created by administrators. An attacker c…CVE-2019-19903Backdropcms · 0.6% likely

    CWE-79

11. An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying certain block descriptions created by…CVE-2019-19901Backdropcms · 0.6% likely

    CWE-79

12. An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content crea…CVE-2019-19900Backdropcms · 0.6% likely

    CWE-79

13. A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via the name par…CVE-2023-31045Backdropcms · CVSS 4.8 · 0.5% likely

    CWE-79

14. Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the…CVE-2024-41709Backdropcms · CVSS 6.1 · 0.3% likely

    CWE-79

15. Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.CVE-2024-54123Backdropcms · CVSS 6.1 · 0.3% likely

    CWE-79

16. The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provided for the op…CVE-2025-71310BackdropCMS · CVSS 1.8 · 0.3% likely

    CWE-80

17. An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, comments, users, and any other type of e…CVE-2025-46595backdropcms · CVSS 6.4 · 0.2% likely

    CWE-79

18. An XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class names.CVE-2025-27826backdropcms · CVSS 6.4 · 0.2% likely

    CWE-79

19. An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class names.CVE-2025-27825backdropcms · CVSS 6.4 · 0.2% likely

    CWE-79

20. An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficiently sanitize input before displaying results to the screen.…CVE-2025-27824backdropcms · CVSS 6.4 · 0.2% likely

    CWE-79

21. An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecti…CVE-2025-27823backdropcms · CVSS 6.4 · 0.2% likely

    CWE-79

22. Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images c…CVE-2026-111442BackdropCMS · CVSS 5.3 · 0.2% likely

    CWE-79

23. A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.CVE-2025-44141Backdropcms · CVSS 6.1 · 0.2% likely

    CWE-79

24. An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain pote…CVE-2025-25063backdropcms · CVSS 4.4 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.