CVE Feed

    Dashboard / CVE / CVE-2026-110907

    CVE-2026-110907

    Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text. A browser is provided for selecting tokens by type. The product doesn't sufficiently limit access to the types of tokens that are available in the token browser. The names of the individual tokens are adequately protected.

    Published:Oct 15, 2026
    Last Modified:Oct 15, 2026
    EPS:Oct 15, 2026
    EPSS Score:0.00245
    CVSS Score:7.5

    Affected Products

    Vendor
    Backdropcms
    Product
    Backdrop

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-111442 (CVSS 5.3) — Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG im…
    CVE-2026-107914 (CVSS 7.8) — Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when…
    CVE-2026-104476 (CVSS 8.2) — Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attack…
    CVE-2025-25063 (CVSS 4.4) — An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not suffici…
    CVE-2024-41709 (CVSS 4.8) — Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they ar…
    CVE-2022-42097 (CVSS 4.8) — Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'C…
    CVE-2022-42094 (CVSS 4.8) — Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via th…
    CVE-2022-24590 (CVSS 5.4) — A stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attac…
    CVE-2021-45268 (CVSS 8.8) — A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers t…
    CVE-2019-14769 (CVSS 6.1) — Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High