Backdropcms: >> Backdrop Cms >> 1.22.0 Security Vulnerabilities
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.
CVSS Score
7.2
EPSS Score
0.008
Published
2022-10-07
An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.
CVSS Score
5.3
EPSS Score
0.001
Published
2022-08-01