Exposure of Sulu

CMS

12

exposure score

659

sites use

0

exploited

0

critical

CVEs

13 results

CVE-2021-43836HIGHPHP file inclusion in the Sulu admin panelEPSS 2.0%CVE-2021-43835HIGHPrivilege escalation in the Sulu Admin panelEPSS 1.1%CVE-2020-15132MEDIUMReset Password / Login vulnerability in SuluEPSS 1.1%CVE-2021-32737HIGHXSS Injection in Media Collection Title was possibleEPSS 0.7%CVE-2021-41169MEDIUMImproper Neutralization HTML tags in sulu/suluEPSS 0.6%CVE-2024-24807LOWSulu is vulnerable to HTML Injection via Autocomplete SuggestionEPSS 0.5%CVE-2023-39343MEDIUMSulu Observable Response Discrepancy on Admin LoginEPSS 0.5%CVE-2024-27915MEDIUMSulu grants access to pages regardless of role permissionsEPSS 0.4%CVE-2025-47778MEDIUMSulu vulnerable to XXE in SVG File upload InspectorEPSS 0.4%CVE-2024-47618MEDIUMSulu vulnerable to XSS via uploaded SVGEPSS 0.4%CVE-2024-47617MEDIUMReflected XSS Vulnerability in Sulu Media BundleEPSS 0.3%CVE-2026-34372MEDIUMSulu checks fix permissions for subentities endpointsEPSS 0.3%CVE-2026-45701MEDIUMSulu: Weak Cryptographical usage for API Key generation and Reset TokensEPSS 0.2%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →