← All advisories

Medium severity6.1NVD Advisory· Published Nov 29, 2024· Updated Jun 17, 2026

CVE-2024-54123

CVE-2024-54123

Description

Backdrop CMS before 1.28.4 and 1.29.x before 1.29.2 allows XSS via an SVG document, if the SVG tag is allowed for a text format.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Backdropcms/Backdrop CMSllm-fuzzy2 versions
<1.28.4, <1.29.2+ 1 more
- (no CPE)range: <1.28.4, <1.29.2
- cpe:2.3:a:backdropcms:backdrop_cms:*:*:*:*:*:*:*:*range: <1.28.4

Patches

Vulnerability mechanics

References

1

backdropcms.org/security/backdrop-sa-core-2024-002nvdVendor Advisory

News mentions

0

No linked articles in our index yet.