Squidex vulnerabilities

Products

• Squidex 8
• Squidex/squidex 3

Newest

• squidex Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction CVE-2026-41177 Public exploit 5.5 MediumApril 22, 2026
• squidex Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets) CVE-2026-41172 7.3 HighApril 22, 2026
• squidex SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient CVE-2026-41171 7.3 HighApril 22, 2026
• squidex Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests CVE-2026-41170 7.2 HighApril 22, 2026
• squidex Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration CVE-2026-24736 9.1 CriticalJanuary 27, 2026
• squidex Cross-Site Scripting (XSS) via postMessage Handler in Squidex CVE-2023-46252 6.8 MediumNovember 7, 2023
• squidex Remote code execution in Squidex CVE-2023-46253 9.1 CriticalNovember 7, 2023
• squidex Stored Cross-site Scripting in Squidex CVE-2023-46744 5.4 MediumNovember 7, 2023
• squidex squidex/squidex, squidex.io squidex +1 more Improper Handling of Additional Special Element in squidex/squidex CVE-2023-3580 5.4 MediumJuly 10, 2023
• squidex squidex/squidex, squidex.io squidex +1 more Improper Handling of Additional Special Element in squidex/squidex CVE-2023-0643 5.4 MediumFebruary 2, 2023
• squidex squidex/squidex, squidex.io squidex +1 more Cross-Site Request Forgery (CSRF) in squidex/squidex CVE-2023-0642 6.8 MediumFebruary 2, 2023