Cross site scripting

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...

CVE-2023-24278

Squidex before 7.4.0 has a cross-site scripting (XSS) vulnerability via the squid.svg endpoint. The issue arises from unsanitized input in the SVG generated by the endpoint, enabling an attacker to potentially obtain sensitive information, modify data, or perform unauthorized admin operations in ...

CVE-2023-24278

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...

CVE-2023-24278

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...

CVE-2023-24278

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...

squidex 跨站脚本漏洞

squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

PT-2023-19506 · Squidex · Squidex

Name of the Vulnerable Software and Affected Versions: Squidex versions prior to 7.4.0 Description: The issue is related to a cross-site scripting XSS vulnerability in the squid.svg file. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading...

CVE-2023-0642

Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0643

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

Input validation

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

squidex 跨站请求伪造漏洞

squidex is a Headless CMS and Content Management Center. A cross-site request forgery vulnerability exists in squidex versions prior to 7.4.0, which stems from the application's lack of protection against cross-site request forgery CSRF and the inability to validate the implementation of CSRF...

PT-2023-16419 · Squidex · Squidex

Name of the Vulnerable Software and Affected Versions: squidex/squidex versions prior to 7.4.0 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository squidex/squidex. This is a type of attack where an attacker tricks a user into performing unintended actions...

PT-2023-16420 · Squidex · Squidex

Name of the Vulnerable Software and Affected Versions: squidex/squidex versions prior to 7.4.0 Description: The issue is related to the improper handling of an additional special element in the GitHub repository squidex/squidex. Recommendations: For versions prior to 7.4.0, update to version 7.4....

squidex 安全漏洞

squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0, which stems from the ability to inject Html into Activity...

CVE-2023-0642

CVE-2023-0642 affects squidex/squidex prior to version 7.4.0 and is a Cross-Site Request Forgery (CSRF) vulnerability. The root cause, as described in connected sources, is a lack of proper CSRF token verification, allowing an attacker to induce authenticated users to perform unintended actions. ...

CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex

Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex

Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex

Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...