Squidex.io

9 CVEs across 1 Squidex.io products. Browse Squidex.io vulnerabilities, severities, and proof-of-concept exploits.

Squidex.io products with known CVEs

ProductCVEs
Squidex9
Squidex.io CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24736Critical9.12026-01-27Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to…
CVE-2023-46857Medium5.42023-12-07Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, a…
CVE-2023-46253Critical9.12023-11-07Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore…
CVE-2023-46252Medium6.82023-11-07Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces…
CVE-2023-46744Medium5.42023-11-07Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege esc…
CVE-2023-3580Medium4.32023-07-10Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
CVE-2023-24278Medium6.12023-03-18Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
CVE-2023-0643Medium6.12023-02-02Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
CVE-2023-0642Medium6.52023-02-02Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.