Vulnerabilities in sulu
18 resultsCVE-2021-43836HIGHPHP file inclusion in the Sulu admin panelEPSS 2.0%CVE-2021-43835HIGHPrivilege escalation in the Sulu Admin panelEPSS 1.2%CVE-2020-15132MEDIUMReset Password / Login vulnerability in SuluEPSS 1.1%CVE-2021-32737HIGHXSS Injection in Media Collection Title was possibleEPSS 0.7%CVE-2023-39343MEDIUMSulu Observable Response Discrepancy on Admin LoginEPSS 0.6%CVE-2021-41169MEDIUMImproper Neutralization HTML tags in sulu/suluEPSS 0.6%CVE-2026-82394MEDIUMSulu: Fix authorization bypass when creating preview linksEPSS 0.6%CVE-2024-24807LOWSulu is vulnerable to HTML Injection via Autocomplete SuggestionEPSS 0.5%CVE-2025-47778MEDIUMSulu vulnerable to XXE in SVG File upload InspectorEPSS 0.5%CVE-2024-27915MEDIUMSulu grants access to pages regardless of role permissionsEPSS 0.4%CVE-2026-82395MEDIUMSulu: Media move/update authorization bypass (IDOR)EPSS 0.4%CVE-2026-92692MEDIUMSulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)EPSS 0.4%CVE-2024-47617MEDIUMReflected XSS Vulnerability in Sulu Media BundleEPSS 0.4%CVE-2024-47618MEDIUMSulu vulnerable to XSS via uploaded SVGEPSS 0.4%CVE-2026-82396MEDIUMSulu: Stored XSS via media download inline-disposition overrideEPSS 0.3%CVE-2024-37156MEDIUMTokenController formName not sanitized in hidden inputEPSS 0.3%CVE-2026-34372MEDIUMSulu checks fix permissions for subentities endpointsEPSS 0.3%CVE-2026-45701MEDIUMSulu: Weak Cryptographical usage for API Key generation and Reset TokensEPSS 0.2%