CVE-2022-42096 Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) · CloudMap

中危CVE-2022-42096跨站脚本攻击

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

披露于 2022/11/22 · 更新于 2025/08/01

CVSS 评分4.8/ 10.0

EPSS 概率2.1%百分位 81.0%

漏洞描述

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 backdrop 相关的其他公开漏洞。

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2025-25062 Backdrop CMS - Cross-Site Scripting backdrop	跨站脚本攻击	中危	4.4	1.7%	PoC	2025/02/03
CVE-2022-42095 Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) backdrop	跨站脚本攻击	中危	4.8	2.1%	PoC	2022/11/24
CVE-2022-42094 Backdrop CMS version 1.23.0 - Stored Cross Site Scripting backdrop	跨站脚本攻击	中危	4.8	2.7%	PoC	2022/11/22