Security Advisory
CVE-2022-42092
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.