[CVE-2022–42094]Backdrop-XSS-at-Cards

Enter your username and password; the account must have admin privileges.

Select Content > add content > Card

Enter information into the form provided and enter the XSS payload in the Body field. Choose “Raw HTML” Editor and Save.

The XSS payload will run immediately.

POC: