CVE-2021-32737

Name of the Vulnerable Software and Affected Versions Sulu versions prior to 1.6.41

Description The issue is related to the lack of protection of the web page structure in the Sulu content management system, allowing a remote attacker to conduct cross-site scripting attacks. A logged-in admin user can add a script injection in the collection title, which can be executed. The problem is patched in version 1.6.41.

Recommendations For versions prior to 1.6.41, update to version 1.6.41 to resolve the issue. As a temporary workaround, manually patch the affected JavaScript files.