Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

sulu — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting sulu. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Sulu is a PHP-based content management system primarily used for enterprise websites and digital experiences. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalations, often stemming from improper input validation and access control issues. The platform's 13 recorded CVEs highlight recurring weaknesses in its templating engine and security mechanisms. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests a need for rigorous patch management and secure configuration practices in production environments.

Found 17 results / 18 Clear Filters
Top products by sulu: sulu SuluFormBundle
CVE ID Title CVSS Severity Published
CVE-2026-92692 Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated) — sulu CWE-89 6.9 Medium 2026-09-23
CVE-2026-82396 Sulu: Stored XSS via media download inline-disposition override — sulu CWE-79 5.4 Medium 2026-08-31
CVE-2026-82395 Sulu: Media move/update authorization bypass (IDOR) — sulu CWE-639 5.3 Medium 2026-08-31
CVE-2026-82394 Sulu: Fix authorization bypass when creating preview links — sulu CWE-862 5.3 Medium 2026-08-31
CVE-2026-45701 Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens — sulu CWE-327 - - 2026-06-01
CVE-2026-34372 Sulu checks fix permissions for subentities endpoints — sulu CWE-288 4.3 - 2026-03-31
CVE-2025-47778 Sulu vulnerable to XXE in SVG File upload Inspector — sulu CWE-611 3.8AI Low AI 2025-05-14
CVE-2024-47617 Reflected XSS Vulnerability in Sulu Media Bundle — sulu CWE-79 6.1 Medium 2024-10-03
CVE-2024-47618 Sulu vulnerable to XSS via uploaded SVG — sulu CWE-79 5.4 - 2024-10-03
CVE-2024-27915 Sulu grants access to pages regardless of role permissions — sulu CWE-863 6.8 Medium 2024-03-06
CVE-2024-24807 Sulu is vulnerable to HTML Injection via Autocomplete Suggestion — sulu CWE-80 2.7 Low 2024-02-05
CVE-2023-39343 Sulu Observable Response Discrepancy on Admin Login — sulu CWE-204 4.3 Medium 2023-08-04
CVE-2021-43836 PHP file inclusion in the Sulu admin panel — sulu CWE-22 8.5 High 2021-12-15
CVE-2021-43835 Privilege escalation in the Sulu Admin panel — sulu CWE-269 7.2 High 2021-12-15
CVE-2021-41169 Improper Neutralization HTML tags in sulu/sulu — sulu CWE-79 6.2 Medium 2021-10-21
CVE-2021-32737 XSS Injection in Media Collection Title was possible — sulu CWE-79 8.4 High 2021-07-02
CVE-2020-15132 Reset Password / Login vulnerability in Sulu — sulu CWE-209 5.3 Medium 2020-08-05

This page lists every published CVE security advisory associated with sulu. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.