Description
Sulu is a highly extensible open-source PHP content management system based on the Symfony framework. There is an issue when inputting HTML into the Tag name. The HTML is executed when the tag name is listed in the auto complete form. Only admin users can create tags so they are the only ones affected. The problem is patched with version(s) 2.4.16 and 2.5.12.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| sulu | sulu | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-0641 | Sulu is a highly extensible open-source PHP content management system based on the Symfony framework. There is an issue when inputting HTML into the Tag name. The HTML is executed when the tag name is listed in the auto complete form. Only admin users can create tags so they are the only ones affected. The problem is patched with version(s) 2.4.16 and 2.5.12. |
 Github GHSA |
GHSA-gfrh-gwqc-63cv | Sulu HTML Injection via Autocomplete Suggestion |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2024-08-01T23:28:12.885Z
Reserved: 2024-01-31T16:28:17.941Z
Link: CVE-2024-24807
Vulnrichment
Updated: 2024-08-01T23:28:12.885Z
NVD
Status : Modified
Published: 2024-02-05T21:15:12.557
Modified: 2024-11-21T08:59:45.297
Link: CVE-2024-24807
Redhat
No data.
OpenCVE Enrichment
No data.