.. / CVE-2022-42095

Exploit for Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) (CVE-2022-42095)

Description:

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

Nuclei Template

View the template here CVE-2022-42095.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-42095.yaml
Copy

References:

https://github.com/bypazs/CVE-2022-42095
https://nvd.nist.gov/vuln/detail/CVE-2022-42095
https://backdropcms.org
https://github.com/backdrop/backdrop/releases/tag/1.23.0