CVE-2021-41169 — Improper Neutralization HTML tags in sulu/sulu
Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input int…
Published: 2021-10-21 · CVSS: 6.2 · CVSS 3.1
Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input into Tag names is not properly sanitized. Only admin users are allowed to create tags. Users are advised to upgrade.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7