Backdrop Cms

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)CVE-2022-42096Backdropcms · CVSS 4.8 · 2.2% likely

   CWE-79

2. Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)CVE-2022-42095Backdropcms · CVSS 4.8 · 2.2% likely

   CWE-79

3. Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficie…CVE-2019-14771Backdropcms · 2.6% likely

   CWE-20

4. Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advance…CVE-2022-42092Backdropcms · 2.1% likely

   CWE-434

5. An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or com…CVE-2019-19902Backdropcms · 1.5% likely

   CWE-20

6. Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Ex…CVE-2018-1000813Backdropcms · 0.7% likely

   CWE-79

7. An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned…CVE-2022-34530Backdropcms · 0.6% likely

   CWE-640

8. An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying file type descriptions created by administrators. An attacker c…CVE-2019-19903Backdropcms · 0.6% likely

   CWE-79

9. An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying certain block descriptions created by…CVE-2019-19901Backdropcms · 0.6% likely

   CWE-79

10. An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content crea…CVE-2019-19900Backdropcms · 0.6% likely

    CWE-79

11. A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via the name par…CVE-2023-31045Backdropcms · CVSS 4.8 · 0.5% likely

    CWE-79

12. Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.CVE-2024-54123Backdropcms · CVSS 6.1 · 0.3% likely

    CWE-79

13. Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and…CVE-2025-63828Backdropcms · CVSS 6.1 · 0.2% likely

    CWE-601

14. A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.CVE-2025-44141Backdropcms · CVSS 6.1 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.