CVE-2023-3580

Description

References

• squidex/squidex commit 2aca762 · Patch
• huntr.dev/bounties/4eed53ca-06c2-43aa-aea8-c03ea5f13ce4 · Exploit

squidex 的其他漏洞

• CVE-2026-24736高危 8.8Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.2…
• CVE-2023-46857中危 5.4Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in th…
• CVE-2023-46253高危 7.2Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in…
• CVE-2023-46252中危 6.1Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handle…
• CVE-2023-46744中危 5.4Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability en…