Approved changes feed: RSS · Atom

cpe:2.3:a:backdropcms:link_iframe_formatter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBackdropcms (c20e3035-f9db-563d-84ef-b3631140211a)
ProductLink Iframe Formatter (6359b6bb-3132-58b0-93fe-2cc8b77467bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27824 vulnerable 2026-06-08 07:14:55.766662 Details available
MEDIUM (6.4)
An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficiently sanitize input before displaying results to the screen. This vulnerability is mitigated by the fact that an attacker must have the ability to create content containing an iFrame field.
Published: 2025-03-07T00:00:00.000Z
Updated: 2025-03-07T22:30:26.688Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.