CVE-2023-24278: Squidex.io Squidex

Medium severity, CVSS 6.1. EPSS: 2.9% chance of exploitation in the next 30 days.

Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.

Affected products

• Squidex.io Squidex: before 7.4.0 (fixed in 7.4.0)

Published 2023-03-18. Last modified 2026-06-17.