CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/11/2023 |
| CVE-2023-46252 | 中危6.1 | Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripting (XSS) vulnerability. The editor-sdk.js file defines three different class-like functions, which employ a global message event listener: Sq | 07/11/2023 |
| CVE-2023-46744 | 中危5.4 | Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficient resulting to stored | 07/11/2023 |
| CVE-2023-3580 | 中危4.3 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. | 10/07/2023 |
| CVE-2023-24278 | 中危6.1 | Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. | 18/03/2023 |
| CVE-2023-0643 | 中危6.1 | Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. | 02/02/2023 |
| CVE-2023-0642 | 中危6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0. | 02/02/2023 |