High severity7.1NVD Advisory· Published May 12, 2026· Updated May 13, 2026

CVE-2026-45430

Description

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Backdrop Contrib/Salesforceinferred
Range: <1.0.1
Backdropcms/Backdrop CMSllm-fuzzy
Range: < 1.x-1.0.1

Patches

Vulnerability mechanics

References

backdropcms.org/security/backdrop-sa-contrib-2026-001nvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000