https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:37:06.202768+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224417 EUVD-2026-224417 2026-10-06T20:37:06.204910+00:00 EUVD-2026-224417 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41709 fkie_cve-2024-41709 2026-10-06T20:37:06.204941+00:00

Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the fact that an attacker must have a role with the "administer fields" permission.

 https://cve.radiocsirt.org/vuln/ghsa-3wmx-48g3-x66g GHSA-3wmx-48g3-x66g — Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places 2026-10-06T20:37:06.204972+00:00

Affected: Packagist: backdrop/backdrop

Backdrop CMS before 1.27.3 and 1.28.x before 1.28.2 does not sufficiently sanitize field labels before they are displayed in certain places. This vulnerability is mitigated by the fact that an attacker must have a role with the "administer fields" permission.