Backdrop CMS contributed projects vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Backdrop CMS contributed projects products: 1 record(s), with severity, exploitation and fixes.

Backdrop-contrib/salesforce 1

Exploited only (KEV) →

CVE-2026-45430 High · 7.1 CWE-352 May 12, 2026

Cross-Site Request Forgery (CSRF) in Backdrop CMS contributed projects Backdrop-contrib/salesforce

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.