2 matches found
CVE-2023-46744: Improper Neutralization of Input During Web Page Generation
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting XSS vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficien...
5.4CVSS6.2AI score0.00499EPSS
SaveExploits1References2
CVE-2003-1305: Undefined Security Weakness
Microsoft Internet Explorer allows remote attackers to cause a denial of service resource consumption via a Javascript src attribute that recursively loads the current web page...
5CVSS5.8AI score0.01267EPSS
SaveExploits1References1
20