Read the docs

Backdrop CMS contributed projects

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Backdrop CMS contributed projects records in CISA KEV

No Backdrop CMS contributed projects vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 32

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00154 Published 2026-05-12 Fixed in 1.x-1.0.1 CWE-352
Open these records in search →