High severity8.4NVD Advisory· Published Jul 2, 2021· Updated Jun 17, 2026
CVE-2021-32737
CVE-2021-32737
Description
Sulu is an open-source PHP content management system based on the Symfony framework. In versions of Sulu prior to 1.6.41, it is possible for a logged in admin user to add a script injection (cross-site-scripting) in the collection title. The problem is patched in version 1.6.41. As a workaround, one may manually patch the affected JavaScript files in lieu of updating.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sulu/suluPackagist | < 1.6.41 | 1.6.41 |
Affected products
3Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-gm2x-6475-g9r8ghsaADVISORY
- github.com/sulu/sulu/releases/tag/1.6.41nvdRelease NotesThird Party AdvisoryWEB
- github.com/sulu/sulu/security/advisories/GHSA-gm2x-6475-g9r8nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-32737ghsaADVISORY
News mentions
0No linked articles in our index yet.