CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
9 CVEs tagged to squidex.io / squidex — 2 Critical, 0 High, 7 Medium, 0 Low, 0 Unrated.
Squidex is an open source headless content management system and content management hub. Versions of the application up to and including 7.21.0 allow users to define "Webhooks" as…
Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, allowing JavaScript i…
Squidex is an open source headless CMS and content management hub. Affected versions are subject to an arbitrary file write vulnerability in the backup restore feature which allow…
Squidex is an open source headless CMS and content management hub. Affected versions are missing origin verification in a postMessage handler which introduces a Cross-Site Scripti…
Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enables privilege escalation of authentic…
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.