medium6.1
CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
Impact
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squidex.Io | Squidex | before 7.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/
- https://www.openwall.com/lists/oss-security/2023/03/16/1
- https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/
- https://www.openwall.com/lists/oss-security/2023/03/16/1