Squidex

6 results · Clear filters · Feed

• Medium 5.5
  CVE-2026-41177 Public exploit

  Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction

  Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-s…

  Squidex squidex
  Apr 22, 2026
• Medium 6.8
  CVE-2023-46252

  Cross-Site Scripting (XSS) via postMessage Handler in Squidex

  Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripting (XSS) vulnerability. The editor-sdk.js file defines three different class-lik…

  Squidex squidex
  Nov 7, 2023
• Medium 5.4
  CVE-2023-46744

  Stored Cross-site Scripting in Squidex

  Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks thr…

  Squidex squidex
  Nov 7, 2023
• Medium 5.4
  CVE-2023-3580

  Improper Handling of Additional Special Element in squidex/squidex

  Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

  Squidex squidex/squidex
  Jul 10, 2023
• Medium 6.8
  CVE-2023-0642

  Cross-Site Request Forgery (CSRF) in squidex/squidex

  Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.

  Squidex squidex/squidex
  Feb 2, 2023
• Medium 5.4
  CVE-2023-0643

  Improper Handling of Additional Special Element in squidex/squidex

  Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

  Squidex squidex/squidex
  Feb 2, 2023