Security Advisory
CVE-2022-42092
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via themes that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.