Skip to content
OpenAdvisories

Package · Packagist

sulu/form-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2024-37156

    TokenController formName not sanitized in hidden input

    The SuluFormBundle adds support for creating dynamic forms in Sulu Admin. The TokenController get parameter formName is not sanitized in the returned input field which leads to XSS. This vulnerability is fixed in 2.5.3.

    sulu SuluFormBundle sulu/form-bundle Packagist