CVE-2026-45430

Backdrop CMS contributed projects / backdrop-contrib/salesforce PUBLISHED

Description (CNA)

The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.

Affected (CNA)

Vendor / product	Versions
Backdrop CMS contributed projects / backdrop-contrib/salesforce	affected 0 before 1.x-1.0.1

CWE

CWE-352

References

https://backdropcms.org/security/backdrop-sa-contrib-2026-001

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.