140 matches found
Squidex Cross-Site Scripting Vulnerability
Squidex is a Headless CMS and Content Management Center. A cross-site scripting vulnerability exists in Squidex 7.8.2 and earlier versions, which stems from the presence of a stored cross-site scripting XSS vulnerability...
CVE-2023-46253: Improper Limitation of a Pathname to a Restricted Directory
Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore feature which allows an authenticated attacker to gain remote code execution RCE. Squidex allows users with the squidex.admin.restore...
Squidex Cross-Site Scripting Vulnerability
squidex is a Headless CMS and Content Management Center. A cross-site scripting vulnerability exists in Squidex version 7.8.2, which stems from a lack of raw validation in the postMessage handler, leading to a cross-site scripting XSS vulnerability...
CVE-2023-46744: Improper Neutralization of Input During Web Page Generation
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting XSS vulnerability enables privilege escalation of authenticated users. The SVG element filtering mechanism intended to stop XSS attacks through uploaded SVG images, is insufficien...
CVE-2023-3580
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
Input validation
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580
The CVE-2023-3580 entry concerns the Squidex project (squidex/squidex) prior to version 7.4.0. The underlying issue is described as improper handling of an additional special element in the repository, leading to a MEDIUM impact vulnerability (per NVD/SECURITY METRICS). Affected component is the ...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-3580: Improper Handling of Additional Special Element
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
squidex 安全漏洞
squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0 that stems from improper handling of additional special elements...
PT-2023-25321 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: Squidex versions prior to 7.4.0 Description: The issue is related to the improper handling of an additional special element in the GitHub repository squidex/squidex. Recommendations: For versions prior to 7.4.0, update to version 7.4.0 or lat...
Cross-site Scripting (XSS)
Overview Squidex.ClientLibrary is a ClientLibrary for Squidex Headless CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the "/squid.svg" endpoint Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious...
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
Cross site scripting
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
CVE-2023-24278: Improper Neutralization of Input During Web Page Generation
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
CVE-2023-24278
Squidex before 7.4.0 has a cross-site scripting (XSS) vulnerability via the squid.svg endpoint. The issue arises from unsanitized input in the SVG generated by the endpoint, enabling an attacker to potentially obtain sensitive information, modify data, or perform unauthorized admin operations in ...