Security Advisory

CVE-2021-32737

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-07-02 17:55:09

Last updated 2024-08-03 23:33:55

Assigner GitHub_M

CVSS score 8.4

State PUBLISHED

Description

Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection (cross-site-scripting) in the collection title. The problem is patched in version 1.6.41. As a workaround, one may manually patch the affected JavaScript files in lieu of updating.

← Browse all CVEs View on cve.org ↗