Cross-Site Scripting Vulnerability in Backdrop CMS by Backdrop
CVE-2025-44141

6.1MEDIUM

Key Information:

Vendor

Backdrop

Status
Backdrop CMS
Vendor
CVE Published:
26 June 2025

What is CVE-2025-44141?

A Cross-Site Scripting (XSS) vulnerability is present in the node creation form of Backdrop CMS version 1.30. This flaw allows attackers to inject malicious scripts into the web application, which can lead to unauthorized actions and data exposure when unsuspecting users interact with the affected forms. It is crucial for users and administrators of Backdrop CMS to be aware of this vulnerability and to apply necessary security measures to mitigate potential risks.

References

https://scandalous-author-611.notion.site/CVE-2025-44141-...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.