CVE-2022-24590

A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00624 · 49.2th percentile
Published
2022-02-15T15:45Z
EPSS history
Timeline
  • 15 FEB 15:45Z
    A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML
    cvelistv5