Squiz Matrix
6 CVEs affecting Squiz Matrix. Latest disclosed: 2022-09-06. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-19374 | Critical | 9.1 | 2019-12-11 | An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 pri… |
CVE-2017-14198 | High | 8.8 | 2017-11-30 | An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Co… |
CVE-2019-19373 | High | 7.5 | 2019-12-11 | An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can… |
CVE-2017-14196 | High | 7.5 | 2017-11-30 | An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge… |
CVE-2017-14197 | Medium | 6.1 | 2017-11-30 | An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIW… |
CVE-2022-32277 | Medium | 5.3 | 2022-09-06 | Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to c… |