CVE-2023-24278

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...

CVE-2023-24278

creationtimestamp| type| source ---|---|--- 2025-01-19 21:02:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pub7dg52h 2025-02-26 19:24:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5585...

CVE-2023-24278

Squidex before 7.4.0 has a cross-site scripting (XSS) vulnerability via the squid.svg endpoint. The issue arises from unsanitized input in the SVG generated by the endpoint, enabling an attacker to potentially obtain sensitive information, modify data, or perform unauthorized admin operations in ...