Backdrop CMS Vulnerable to XSS via SVG Document
CVE-2024-54123

Currently unrated

Key Information:

Vendor: Backdrop CMS
Vendor: CVE Published:; 29 November 2024

🔔 Create Backdrop CMS Vulnerability Alert

What is CVE-2024-54123?

Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://backdropcms.org/security/backdrop-sa-core-2024-002

Timeline

Vulnerability published
Nov 29, 2024
Vulnerability Reserved
Nov 29, 2024

JSON

Backdrop CMS

What is CVE-2024-54123?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.