Back to CVE Browser

CVE-2023-24278

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-03-18

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.

Affected Platforms (CPE)

📦

Squidex.io

Squidex

< 7.4.0

References & Advisories

🔗 https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/

🔗 https://www.openwall.com/lists/oss-security/2023/03/16/1

🔗 https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/

🔗 https://www.openwall.com/lists/oss-security/2023/03/16/1

Related Vulnerabilities

CVE-2023-468575.4

Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete black...

CVE-2023-462539.1

Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulner...

CVE-2023-462526.8

Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMess...

CVE-2023-467445.4

Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulner...