Squidex.io Squidex
9 CVEs affecting Squidex.io Squidex. Latest disclosed: 2026-01-27. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24736 | Critical | 9.1 | 2026-01-27 | Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to… |
CVE-2023-46253 | Critical | 9.1 | 2023-11-07 | Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore… |
CVE-2023-46252 | Medium | 6.8 | 2023-11-07 | Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces… |
CVE-2023-0642 | Medium | 6.5 | 2023-02-02 | Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0. |
CVE-2023-24278 | Medium | 6.1 | 2023-03-18 | Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. |
CVE-2023-0643 | Medium | 6.1 | 2023-02-02 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. |
CVE-2023-46857 | Medium | 5.4 | 2023-12-07 | Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, a… |
CVE-2023-46744 | Medium | 5.4 | 2023-11-07 | Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege esc… |
CVE-2023-3580 | Medium | 4.3 | 2023-07-10 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. |