Cross-Site Scripting Vulnerability in Bootstrap 5 Lite Theme for Backdrop CMS

CVE-2025-27825

What is CVE-2025-27825?

A Cross-Site Scripting (XSS) vulnerability was identified in the Bootstrap 5 Lite theme for Backdrop CMS, specifically in versions before 1.x-1.0.3. This vulnerability arises due to inadequate sanitization of certain class names, potentially allowing attackers to inject malicious scripts. If exploited, this issue could lead to unauthorized actions and exposure of sensitive user data. It is crucial for users to update their themes to the latest version to mitigate the risks associated with this vulnerability. For additional details, visit the official Backdrop CMS security advisory.

References