CVE-2022-42095 Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) · CloudMap

中危CVE-2022-42095

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

披露于 2022/11/24 · 更新于 2025/08/01

CVSS 评分4.8/ 10.0

EPSS 概率43.4%百分位 97.4%

漏洞描述

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 backdrop 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2025-25062 Backdrop CMS - Cross-Site Scripting backdrop	中危	4.4	25.3%	PoCEXP	2025/02/03
CVE-2022-42096 Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) backdrop	中危	4.8	6.7%	PoCEXP	2022/11/22
CVE-2022-42094 Backdrop CMS version 1.23.0 - Stored Cross Site Scripting backdrop	中危	4.8	17.4%	PoCEXP	2022/11/22