Squidex.io Squidex vulnerabilities

• squidex Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration CVE-2026-24736 9.1 CriticalJanuary 27, 2026
• squidex.io squidex Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, allowing JavaScript in the SRC attribute o… CVE-2023-46857 5.4 MediumDecember 7, 2023
• squidex Cross-Site Scripting (XSS) via postMessage Handler in Squidex CVE-2023-46252 6.8 MediumNovember 7, 2023
• squidex Remote code execution in Squidex CVE-2023-46253 9.1 CriticalNovember 7, 2023
• squidex Stored Cross-site Scripting in Squidex CVE-2023-46744 5.4 MediumNovember 7, 2023
• squidex squidex/squidex, squidex.io squidex +1 more Improper Handling of Additional Special Element in squidex/squidex CVE-2023-3580 5.4 MediumJuly 10, 2023
• squidex.io squidex Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. CVE-2023-24278 Public exploit 6.1 MediumMarch 18, 2023
• squidex squidex/squidex, squidex.io squidex +1 more Improper Handling of Additional Special Element in squidex/squidex CVE-2023-0643 5.4 MediumFebruary 2, 2023
• squidex squidex/squidex, squidex.io squidex +1 more Cross-Site Request Forgery (CSRF) in squidex/squidex CVE-2023-0642 6.8 MediumFebruary 2, 2023