https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-47618.htmlhttps://patchthecve.com/cve/CVE-2024-47618.htmlWed, 17 Jun 2026 07:57:24 +0000MEDIUM 5.4: Sulu is a PHP content management system. Sulu is vulnerable against XSS whereas a low privileged user with access to the “Media” section can upload an SVG file with a malicious payload. Once uploaded and accessed, the malicious javascript will be executed on the victims’ (other users including adminhttps://patchthecve.com/cve/CVE-2024-47617.htmlhttps://patchthecve.com/cve/CVE-2024-47617.htmlWed, 17 Jun 2026 07:57:24 +0000MEDIUM 6.1: Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle component. The vulnerability is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allhttps://patchthecve.com/cve/CVE-2024-27915.htmlhttps://patchthecve.com/cve/CVE-2024-27915.htmlWed, 17 Jun 2026 07:20:35 +0000MEDIUM 6.8: Sulu is a PHP content management system. Starting in verson 2.2.0 and prior to version 2.4.17 and 2.5.13, access to pages is granted regardless of role permissions for webspaces which have a security system configured and permission check enabled. Webspaces without do not have this issue. The problehttps://patchthecve.com/cve/CVE-2023-39343.htmlhttps://patchthecve.com/cve/CVE-2023-39343.htmlWed, 17 Jun 2026 06:12:06 +0000MEDIUM 4.3: Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by