Known vulnerabilities in Backdrop CMS 1.19.0

Software: Backdrop CMS
Version: 1.19.0
Software CPE: cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Backdrop CMS version 1.19.0 Backdrop CMS 1.19.0 is affected by 13 vulnerabilities: 1 high, 6 medium, 6 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100822 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
1.28.4, 1.29.2 22.11.2024 SB2024112215
#VU73725 - Improper Access Control
CWE-284 Low
No
No
1.23.3, 1.24.1 15.03.2023 SB2023031541
SB2023031612
#VU60977 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24590
CWE-79 Low
No
No
1.20.6, 1.21.3 03.03.2022 SB2022030308
#VU60672 - Improper input validation
CVE-2022-25271
CWE-20 Medium
No
No
1.20.5, 1.21.2 16.02.2022 SB2022021627
SB2022021628
SB2022101515
and 3 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182
CWE-79 Medium
No
No
1.21.0 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183
CWE-79 Medium
No
No
1.21.0 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU58220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41164
CWE-79 Medium
No
No
1.19.5, 1.20.2 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 6 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165
CWE-79 Medium
No
No
1.19.5, 1.20.2 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU55819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.18.7, 1.19.3 12.08.2021 SB2021081214
SB2021081215
SB2021081220
#VU55818 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.18.7, 1.19.3 12.08.2021 SB2021081214
SB2021081215
SB2021081220
#VU55817 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.18.7, 1.19.3 12.08.2021 SB2021081214
SB2021081215
SB2021081220
#VU55101 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-32610
CWE-59 High
No
No
1.18.6, 1.19.2 20.07.2021 SB2021072062
SB2021072221
SB2021102617
and 12 more
#VU53604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33829
CWE-79 Low
No
No
1.18.5, 1.19.1 27.05.2021 SB2021052701
SB2021052702
SB2021052704
and 8 more