Vulnerabilities

Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details.

An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4…

An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can trigger arbitrary unserialization of a PHP object from a pac…

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3.

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3.

An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3.