Vulnerabilities > Backdropcms > Backdrop > High

DATE CVE VULNERABILITY TITLE RISK
2022-02-03 CVE-2021-45268 Cross-Site Request Forgery (CSRF) vulnerability in Backdropcms Backdrop 1.20.0
A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file.
network
low complexity
backdropcms CWE-352
8.8