CVE-2022-42094 Backdrop CMS version 1.23.0 - Stored Cross Site Scripting · CloudMap

中危CVE-2022-42094

Backdrop CMS version 1.23.0 - Stored Cross Site Scripting

披露于 2022/11/22 · 更新于 2025/10/21

CVSS 评分4.8/ 10.0

EPSS 概率17.4%百分位 94.7%

漏洞描述

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 backdrop 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2025-25062 Backdrop CMS - Cross-Site Scripting backdrop	中危	4.4	25.3%	PoCEXP	2025/02/03
CVE-2022-42095 Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) backdrop	中危	4.8	43.4%	PoCEXP	2022/11/24
CVE-2022-42096 Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) backdrop	中危	4.8	6.7%	PoCEXP	2022/11/22