← Database

CVE-2022-42092

HIGH CVSS: 7.2 Published: 2022-10-07 Modified: 2026-06-17

Description

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

Affected Platforms

Backdropcms Backdrop Cms

Weakness Type

CWE-434

References