← All advisories

Medium severity6.1NVD Advisory· Published Nov 29, 2024· Updated Apr 6, 2026

CVE-2024-54123

CVE-2024-54123

Description

Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Backdropcms/Backdrop CMS2 versions
cpe:2.3:a:backdropcms:backdrop_cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:backdropcms:backdrop_cms:*:*:*:*:*:*:*:*range: <1.28.4
- (no CPE)range: >=1.28.0 <1.28.4 || >=1.29.0 <1.29.2

Patches

Vulnerability mechanics

References

1

backdropcms.org/security/backdrop-sa-core-2024-002nvdVendor Advisory

News mentions

0

No linked articles in our index yet.