CVE-2024-47618
Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the “Media” section can upload an SVG file with a malicious payload. Once uploaded and accessed, the malicious javascript will be executed on the victims’ (other users including admins) browsers. This issue is fixed in 2.6.5.
| Software | From | Fixed in |
|---|---|---|
sulu / sulu
|
2.0.0 | 2.0.0.x |
|
sulu / sulu
|
2.0.0-rc1 | 2.0.0-rc1.x |
|
sulu / sulu
|
2.0.0-rc2 | 2.0.0-rc2.x |
|
sulu / sulu
|
2.0.0-rc3 | 2.0.0-rc3.x |
|
sulu / sulu
|
2.0.0.x | 2.6.5 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime