CVE-2022-42092: Backdropcms Backdrop CMS

High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days.

Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.

Affected products

• Backdropcms Backdrop CMS: version 1.22.0 only

Published 2022-10-07. Last modified 2026-06-17.