Vulnerabilities

TI-2026-19941 CVE-2026-24736

Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration

HIGH 74

Squidex is an open source headless content management system and content management hub.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00489 Published 2026-01-27 No fix listed CWE-918

TI-2023-25314 CVE-2023-46857

LOW 25

Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00569 Published 2023-12-07 No fix listed CWE-79

TI-2023-24879 CVE-2023-46252

LOW 31

Squidex is an open source headless CMS and content management hub.

CVSS 3.1MEDIUM 6.8 Adjacent network No auth User interaction EPSS 0.00565 Published 2023-11-07 Fixed in 7.9.0 CWE-79

TI-2023-24880 CVE-2023-46253

HIGH 74

Squidex is an open source headless CMS and content management hub.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01856 Published 2023-11-07 Fixed in 7.9.0 CWE-22

TI-2023-25227 CVE-2023-46744 · GHSA-g57h-gw9r-cw26

MEDIUM 58

Squidex is an open source headless CMS and content management hub.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00576 Published 2023-11-07 Fixed in 7.9.0 CWE-79

TI-2023-03342 CVE-2023-3580 · GHSA-p83x-2782-8pc4

MEDIUM 53

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00638 Published 2023-07-10 Fixed in 7.4.0 CWE-167

TI-2023-09957 CVE-2023-24278 · GHSA-xf98-7xfh-rcv5

LOW 33

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02908 Published 2023-03-18 No fix listed CWE-79

TI-2023-00609 CVE-2023-0643 · GHSA-4g2g-8pcm-99w8

MEDIUM 60

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0058 Published 2023-02-02 Fixed in 7.4.0 CWE-167

TI-2023-00608 CVE-2023-0642 · GHSA-769x-rww2-6j8v

MEDIUM 62

Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00412 Published 2023-02-02 Fixed in 7.4.0 CWE-352