Cross Site Scripting(XSS)

sulu/sulu is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the improper handling of user input in the media download URL within the SuluMediaBundle component, allowing attackers to inject malicious code that can be executed in the browser of users who access the compromised...

GHSA-255W-87RH-RG44 Cross-site Scripting via uploaded SVG

In Sulu v2.0.0 through v2.6.4 are vulnerable against XSS whereas a low privileged user with an access to the “Media” section can upload an SVG file with a malicious payload. Once uploaded and accessed, the malicious javascript will be executed on the victims’ other users including admins browsers...

SULU Sulu Cross-Site Script Vulnerability

SULU Sulu is an extensible, PHP-based open source content management system on Symfony framework from Sulu SULU Austria. Sulu suffers from a cross-site scripting vulnerability that stems from a stored cross-site scripting attack in versions prior to 1.6.43. An attacker can exploit the vulnerabili...