Moderate severityNVD Advisory· Published Oct 21, 2021· Updated Aug 4, 2024
Improper Neutralization HTML tags in sulu/sulu
CVE-2021-41169
Description
Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input into Tag names is not properly sanitized. Only admin users are allowed to create tags. Users are advised to upgrade.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sulu/suluPackagist | < 1.6.43 | 1.6.43 |
Affected products
2Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-h58v-g3q6-q9fxghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-41169ghsaADVISORY
- github.com/sulu/sulu/commit/20007ac70a3af3c9e53a6acb0ef8794b65642445ghsax_refsource_MISCWEB
- github.com/sulu/sulu/security/advisories/GHSA-h58v-g3q6-q9fxghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.