CVE

CVE-2022-42094

4.8

CVSSmedium

Exploitable remotely over the internet · requires high privileges · user interaction needed.

Description

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

Attack Vector

Network

Privileges Req.

High

User Interaction

Required

Updated Sep 18, 2026View on NVD →

S4E scanner

CVE-2022-42094 Scanner

CVE-2022-42094 scanner - Cross-Site Scripting (XSS) vulnerability in Backdrop CMS

Used 2.3k times · 5.9k assets checked · domain, ipv4, subdomain

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.