backdropcms backdrop vulnerabilities

5 published CVEs name backdropcms backdrop among the affected products.

Critical 0High 2Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-111442
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous…
BackdropCMS · Backdrop
Medium5.3
CVE-2026-110907
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name])…
BackdropCMS · Backdrop
High7.5
CVE-2026-107914
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This…
backdropcms · Backdrop
High7.8
CVE-2025-25063
An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they…
backdropcms · backdrop
Medium4.4
CVE-2025-25062
An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor…
backdropcms · backdrop
Medium4.4