{"action":"Upgrade sulu/sulu to 1.6.43 or later.","affected":[{"fixed":"1.6.43","introduced":"0"}],"component":"sulu/sulu","cve_ids":["CVE-2021-41169"],"ecosystem":"Packagist","epss":0.00591,"exploited":false,"fixed_versions":["1.6.43"],"ghsa_id":"GHSA-h58v-g3q6-q9fx","id":"tcs_01M5KF3BH9JGK2SXHZAR7DKMMH","modified_at":"2026-07-08T06:29:12.257766761Z","published_at":"2021-10-22T16:20:53Z","references":["https://osv.dev/vulnerability/GHSA-h58v-g3q6-q9fx","https://github.com/sulu/sulu/security/advisories/GHSA-h58v-g3q6-q9fx","https://nvd.nist.gov/vuln/detail/CVE-2021-41169","https://github.com/sulu/sulu/commit/20007ac70a3af3c9e53a6acb0ef8794b65642445","https://github.com/sulu/sulu"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-h58v-g3q6-q9fx","url":"https://osv.dev/vulnerability/GHSA-h58v-g3q6-q9fx"}],"summary":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu"}