Browse all 12 CVE security advisories affecting backdropcms. AI-powered Chinese analysis, POCs, and references for each vulnerability.
BackdropCMS is an open-source content management system designed for building websites and managing digital content, particularly favored by non-profits and educational institutions. Historically, the platform has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. While no major public security incidents have been widely documented, the 8 recorded CVEs highlight ongoing security concerns, particularly in areas like file handling and user permissions. The project maintains regular security updates, but administrators should prioritize timely patching due to the potential severity of identified vulnerabilities.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111442 | Backdrop CMS 1.34/1.35 反射型XSS漏洞 — Backdrop CWE-79 | 5.3 | Medium | 2026-10-16 |
| CVE-2026-110907 | Backdrop CMS令牌处理不当漏洞 — Backdrop CWE-669 | 7.5 | High | 2026-10-15 |
| CVE-2026-107914 | Backdrop CMS配置文件导出压缩包权限绕过漏洞 — Backdrop CWE-459 | 7.8 | High | 2026-10-09 |
| CVE-2025-25062 | Backdrop CMS 安全漏洞 — backdrop CWE-79 | 4.4 | Medium | 2025-02-03 |
| CVE-2025-25063 | Backdrop CMS 安全漏洞 — backdrop CWE-79 | 4.4 | Medium | 2025-02-03 |
This page lists every published CVE security advisory associated with backdropcms. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.