CVE-2022-42095 in Backdrop
Summary
by MITRE • 11/23/2022
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 04/28/2025
Backdrop CMS version 1.23.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into page content, which then executes in the context of other users' browsers when they view the affected pages. This vulnerability resides in the content handling mechanism where user input is not properly sanitized before being rendered back to end users. The flaw enables persistent XSS attacks where malicious code can be stored on the server and executed whenever legitimate users access the compromised content. According to CWE-79, this represents a classic stored cross-site scripting vulnerability where the malicious payload is stored on the server and subsequently served to other users. The vulnerability affects the core content management functionality of Backdrop CMS, specifically in how it processes and displays page content. Attackers can exploit this weakness by submitting crafted payloads through the content creation interface, which are then stored in the database and executed when other users browse to pages containing the malicious content. This creates a persistent threat that can compromise user sessions, steal sensitive information, or redirect users to malicious websites. The impact extends beyond individual compromised pages to potentially affect entire user bases who interact with the CMS. From an operational perspective, this vulnerability aligns with ATT&CK technique T1566.001 for initial access through malicious content and T1059.001 for command and control through script execution. The vulnerability represents a critical security risk for organizations relying on Backdrop CMS for their web presence, as it allows for long-term persistence and widespread impact. Organizations should immediately update to a patched version of Backdrop CMS to mitigate this risk. The vulnerability demonstrates the importance of proper input validation and output encoding in web applications, particularly in content management systems where user-generated content is processed and displayed. Security teams should implement additional monitoring for suspicious content submissions and consider implementing content security policies to further protect against such attacks. The flaw underscores the necessity of comprehensive security testing for web applications, particularly focusing on user input handling and output sanitization mechanisms. Organizations should also review their incident response procedures to ensure rapid detection and remediation of similar vulnerabilities in their web infrastructure.