📦 Sulu

by Sulu

🔍 What is Sulu?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-43835

HIGH CVSS 7.2 Dec 15, 2021

CVE-2021-43835 is a privilege escalation vulnerability in Sulu CMS where authenticated users with any admin UI access can exploit the ProfileController API to grant themselves additional permissions t...

CVE-2021-32737

HIGH CVSS 8.4 Jul 2, 2021

This vulnerability allows authenticated admin users in Sulu CMS to inject malicious scripts into collection titles, leading to cross-site scripting (XSS) attacks. The vulnerability affects Sulu versio...

CVE-2024-47618

MEDIUM CVSS 5.4 Oct 3, 2024

Sulu CMS versions before 2.6.5 contain a cross-site scripting (XSS) vulnerability where low-privileged users with Media section access can upload malicious SVG files. When other users (including admin...