CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/11/2023 |
| CVE-2023-46252 | MEDIO6.1 | Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripting (XSS) vulnerability. The editor-sdk.js file defines three different class-like functions, which employ a global message event listener: Sq | 07/11/2023 |
| CVE-2023-46744 | MEDIO5.4 | Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficient resulting to stored | 07/11/2023 |
| CVE-2023-3580 | MEDIO4.3 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. | 10/07/2023 |
| CVE-2023-24278 | MEDIO6.1 | Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. | 18/03/2023 |
| CVE-2023-0643 | MEDIO6.1 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. | 02/02/2023 |
| CVE-2023-0642 | MEDIO6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0. | 02/02/2023 |