CVE-2022-32277: Squiz Matrix

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details. NOTE: this is disputed by both the vendor and the original discoverer because it is a site-specific finding, not a finding about the Squiz Matrix CMS product.

Affected products

• Squiz Matrix: version 6.20 only

Published 2022-09-06. Last modified 2026-06-17.