CVE

CVE-2022-42095

4.8

CVSSmedium

Exploitable remotely over the internet · requires high privileges · user interaction needed.

Description

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

Attack Vector

Network

Privileges Req.

High

User Interaction

Required

Updated Sep 28, 2026View on NVD →

S4E scanner

CVE-2022-42095 Scanner

CVE-2022-42095 scanner - Cross Site Scripting (Stored) vulnerability in Backdrop CMS

Used 2.8k times · 3.3k assets checked · domain, ipv4, subdomain

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.