← All advisories

Medium severity6.1NVD Advisory· Published Mar 18, 2023· Updated Jun 17, 2026

CVE-2023-24278

CVE-2023-24278

Description

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Squidex/Squidexllm-fuzzy2 versions
<7.4.0+ 1 more
- (no CPE)range: <7.4.0
- (no CPE)
Squidex.io/Squidex
cpe:2.3:a:squidex.io:squidex:*:*:*:*:*:*:*:*
Range: <7.4.0

Patches

Vulnerability mechanics

References

2

census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/nvdExploitThird Party Advisory
www.openwall.com/lists/oss-security/2023/03/16/1nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.