140 matches found
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting XSS vulnerability...
PT-2023-19506 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: Squidex versions prior to 7.4.0 Description: The issue is related to a cross-site scripting XSS vulnerability in the squid.svg file. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading...
squidex 跨站脚本漏洞
squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-0643
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0642
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
Input validation
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
PT-2023-16420 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: squidex/squidex versions prior to 7.4.0 Description: The issue is related to the improper handling of an additional special element in the GitHub repository squidex/squidex. Recommendations: For versions prior to 7.4.0, update to version 7.4....
squidex 跨站请求伪造漏洞
squidex is a Headless CMS and Content Management Center. A cross-site request forgery vulnerability exists in squidex versions prior to 7.4.0, which stems from the application's lack of protection against cross-site request forgery CSRF and the inability to validate the implementation of CSRF...
CVE-2023-0642
CVE-2023-0642 affects squidex/squidex prior to version 7.4.0 and is a Cross-Site Request Forgery (CSRF) vulnerability. The root cause, as described in connected sources, is a lack of proper CSRF token verification, allowing an attacker to induce authenticated users to perform unintended actions. ...
CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
PT-2023-16419 · Squidex · Squidex
Name of the Vulnerable Software and Affected Versions: squidex/squidex versions prior to 7.4.0 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository squidex/squidex. This is a type of attack where an attacker tricks a user into performing unintended actions...
CVE-2023-0642: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
squidex 安全漏洞
squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0, which stems from the ability to inject Html into Activity...
CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0643: Improper Handling of Additional Special Element
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0643
CVE-2023-0643 affects squidex/squidex prior to 7.4.0. The issue is described as improper handling of an additional special element in the GitHub repository, enabling potential HTML injection in activity-related contexts (as per CNNVD/Red Hat/NVD family entries). The vulnerability impact is framed...