Squidex
11 CVEs across 2 Squidex products. Browse Squidex vulnerabilities, severities, and proof-of-concept exploits.
Squidex products with known CVEs
Squidex CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-41177 | Medium | 5.5 | 2026-04-22 | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blin… |
CVE-2026-41172 | | | 2026-04-22 | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, an SSRF vulnerability allows a user with asse… |
CVE-2026-41171 | | | 2026-04-22 | Squidex is an open source headless content management system and content management hub. Versions prior to 7.23.0 have a Server-Side Request Forgery (SSRF) vul… |
CVE-2026-41170 | | | 2026-04-22 | Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the `RestoreController.PostRestoreJob` endpoi… |
CVE-2026-24736 | Critical | 9.1 | 2026-01-27 | Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to… |
CVE-2023-46253 | Critical | 9.1 | 2023-11-07 | Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore… |
CVE-2023-46252 | Medium | 6.8 | 2023-11-07 | Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces… |
CVE-2023-46744 | Medium | 5.4 | 2023-11-07 | Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege esc… |
CVE-2023-3580 | Medium | 4.3 | 2023-07-10 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. |
CVE-2023-0643 | Medium | 6.1 | 2023-02-02 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. |
CVE-2023-0642 | Medium | 6.5 | 2023-02-02 | Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0. |