.. / CVE-2022-42096

Exploit for Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored) (CVE-2022-42096)

Description:

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.

Nuclei Template

View the template here CVE-2022-42096.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-42096.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2022-42096
https://backdropcms.org
https://github.com/manas3c/CVE-POC
https://github.com/backdrop/backdrop/releases/tag/1.23.0
https://github.com/bypazs/CVE-2022-42096