Medium severity6.2NVD Advisory· Published Oct 21, 2021· Updated Jun 17, 2026
CVE-2021-41169
CVE-2021-41169
Description
Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input into Tag names is not properly sanitized. Only admin users are allowed to create tags. Users are advised to upgrade.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sulu/suluPackagist | < 1.6.43 | 1.6.43 |
Affected products
3Patches
Vulnerability mechanics
References
4- github.com/sulu/sulu/commit/20007ac70a3af3c9e53a6acb0ef8794b65642445nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-h58v-g3q6-q9fxghsaADVISORY
- github.com/sulu/sulu/security/advisories/GHSA-h58v-g3q6-q9fxnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-41169ghsaADVISORY
News mentions
0No linked articles in our index yet.