What is GHSA-8hjx-7pv7-rr27?

GHSA-8hjx-7pv7-rr27 is a security advisory published by GitHub Security Advisories with Medium severity. Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a...

Which CVE IDs does GHSA-8hjx-7pv7-rr27 cover?

GHSA-8hjx-7pv7-rr27 covers the following CVE IDs: CVE-2026-31016. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8hjx-7pv7-rr27?

GHSA-8hjx-7pv7-rr27 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-8hjx-7pv7-rr27MediumCVSS 6.5

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a...

Vendor

GitHub Security Advisories

Published

June 29, 2026

Last Modified

June 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-31016 →

📋 Description

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escalate privileges via the IdentityServer account profile endpoint

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-31016
https://github.com/Squidex/squidex
https://lgnas.gitbook.io/findings/cve-2026-31016
https://lgnas.gitbook.io/hello/silly-findings/squidex-cms-csrf
https://www.youtube.com/watch?v=62ay_jrwUcI
https://github.com/advisories/GHSA-8hjx-7pv7-rr27