CVE-2026-45701 | | | 2026-06-01 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key ge… |
CVE-2026-34372 | Low | 2.7 | 2026-03-31 | Sulu is an open-source PHP content management system based on the Symfony framework. From versions 1.0.0 to before 2.6.22, and 3.0.0 to before 3.0.5, a user wh… |
CVE-2025-47778 | | | 2025-05-14 | Sulu is an open-source PHP content management system based on the Symfony framework. Starting in versions 2.5.21, 2.6.5, and 3.0.0-alpha1, an admin user can up… |
CVE-2024-47618 | Medium | 5.4 | 2024-10-03 | Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the “Media” section can upload an SVG file… |
CVE-2024-47617 | Medium | 6.1 | 2024-10-03 | Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu… |
CVE-2024-37156 | Medium | 6.1 | 2024-06-06 | The SuluFormBundle adds support for creating dynamic forms in Sulu Admin. The TokenController get parameter formName is not sanitized in the returned input fie… |
CVE-2024-27915 | Medium | 6.8 | 2024-03-06 | Sulu is a PHP content management system. Starting in verson 2.2.0 and prior to version 2.4.17 and 2.5.13, access to pages is granted regardless of role permiss… |
CVE-2024-24807 | Low | 2.7 | 2024-02-05 | Sulu is a highly extensible open-source PHP content management system based on the Symfony framework. There is an issue when inputting HTML into the Tag name… |
CVE-2023-39343 | Medium | 4.3 | 2023-08-04 | Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email)… |
CVE-2021-43836 | High | 8.5 | 2021-12-15 | Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions an attacker can read arbitrary local files via a PHP… |
CVE-2021-43835 | High | 7.2 | 2021-12-15 | Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin… |
CVE-2021-41169 | Medium | 6.2 | 2021-10-21 | Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attac… |
CVE-2021-32737 | High | 8.4 | 2021-07-02 | Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin… |
CVE-2020-15132 | Medium | 5.3 | 2020-08-05 | In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu asks the user for a username or email a… |
CVE-2017-1000465 | Medium | 5.4 | 2018-01-09 | Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of servic… |