EUVD-2026-68891

Sulu: Stored XSS via media download inline-disposition override...

CVE-2026-82396

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...

PT-2026-84048

Name of the Vulnerable Software and Affected Versions Sulu versions prior to 2.6.25 Sulu versions prior to 3.0.8 Description An issue exists in the MediaStreamController.php file where the /media/id/download/slug endpoint and its administration variant honor the inline query parameter for...