backdropcms Vulnerabilities and Affected Products
Vulnerabilities associated with Flag.
Products
Clear product- backdrop3 vulnerabilities
- Bootstrap 5 Lite theme1 vulnerability
- Bootstrap Lite theme1 vulnerability
- Flag1 vulnerability
- GDPR cookies module for Backdrop CMS1 vulnerability
- Link iframe formatter1 vulnerability
- Mail Disguise1 vulnerability
- Masquerade1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-46595MEDIUM | An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, comments, users, and any other type of entity. It doesn't verify flag links before performing the flag action, or verify that the response returned was provided by the flag module. This can allow crafted HTML to result in Cross Site Scripting. This is mitigated by the fact that an attacker must have a role with permission to create links on the website, for e… CWE-79Apr 25, 2025 | CVSS6.4v3.1 | EPSS0.226% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |