Product

Backdrop CMS contributed projects backdrop-contrib/salesforce vulnerabilities

1 published CVE affecting Backdrop CMS contributed projects backdrop-contrib/salesforce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest Backdrop CMS contributed projects backdrop-contrib/salesforce CVEs

Newest publication first

CVE-2026-45430 The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.
Published 2026-05-12

HighCVSS 7.1 EPSS 0.15%

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

Backdrop CMS contributed projects backdrop-contrib/salesforce vulnerabilities

Latest Backdrop CMS contributed projects backdrop-contrib/salesforce CVEs

CVE-2026-45430 The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.