Servers and applications
CVE-2024-41709
Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the fact that an attacker must have a role with the "administer fields" permission.
- Severity
- Medium 4.8
- Published
- 22 Jul 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 1.27.3, 1.28.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Backdrop CMSServers and applications · cpe:a:backdropcms:backdrop |
|