CVE-2023-46252

Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripting XSS vulnerability. The editor-sdk.js file defines three different class-like functions, which employ a global messa...

CVE-2023-46252: Improper Neutralization of Input During Web Page Generation

Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripting XSS vulnerability. The editor-sdk.js file defines three different class-like functions, which employ a global messa...

PT-2023-29932

Name of the Vulnerable Software and Affected Versions Squidex affected versions not specified Description The issue concerns a Cross-Site Scripting XSS vulnerability due to missing origin verification in a postMessage handler. This affects the editor-sdk.js file, which defines class-like function...