{"action":"Upgrade sulu/sulu to 1.6.41 or later.","affected":[{"fixed":"1.6.41","introduced":"0"}],"component":"sulu/sulu","cve_ids":["CVE-2021-32737"],"ecosystem":"Packagist","epss":0.00665,"exploited":false,"fixed_versions":["1.6.41"],"ghsa_id":"GHSA-gm2x-6475-g9r8","id":"tcs_01M5KF2W17VZCDC55W3N0AVYRM","modified_at":"2026-07-08T06:30:04.402421579Z","published_at":"2021-07-02T18:32:18Z","references":["https://osv.dev/vulnerability/GHSA-gm2x-6475-g9r8","https://github.com/sulu/sulu/security/advisories/GHSA-gm2x-6475-g9r8","https://nvd.nist.gov/vuln/detail/CVE-2021-32737","https://github.com/sulu/sulu/releases/tag/1.6.41"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-gm2x-6475-g9r8","url":"https://osv.dev/vulnerability/GHSA-gm2x-6475-g9r8"}],"summary":"XSS Injection in Media Collection Title was possible"}