Backdrop

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Backdrop CMS version 1.23.0 - Stored Cross Site ScriptingCVE-2022-42094Backdropcms · CVSS 4.8 · 2.8% likely

   CWE-79

2. A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploa…CVE-2021-45268Backdropcms · 1.8% likely

   CWE-352

3. An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor i…CVE-2025-25062backdropcms · CVSS 4.4 · 1.7% likely

   CWE-79

4. Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .CVE-2022-42097Backdropcms · CVSS 4.8 · 0.9% likely

   CWE-79

5. Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created by administrators. An attacker could pot…CVE-2019-14769Backdropcms · 0.8% likely

   CWE-79

6. A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML.CVE-2022-24590Backdropcms · 0.6% likely

   CWE-79

7. Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically i…CVE-2026-110907BackdropCMS · CVSS 7.5 · 0.3% likely

   CWE-669

8. Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the…CVE-2024-41709Backdropcms · CVSS 6.1 · 0.3% likely

   CWE-79

9. Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images c…CVE-2026-111442BackdropCMS · CVSS 5.3 · 0.2% likely

   CWE-79

10. An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain pote…CVE-2025-25063backdropcms · CVSS 4.4 · 0.2% likely

    CWE-79

11. Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by…CVE-2026-107914backdropcms · CVSS 7.8 · 0.1% likely

    CWE-459

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.