CVE-2020-15071

2020-08-1118:15:13

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields[‘name’] to appendSubheading.

CPENameOperatorVersion
symphonycmseq2.5.3
symphonycmseq2.3.2beta2
symphonycmseq2.5.2-rc.1
symphonycmseq2.0.7RC2
symphonycmseq2.4RC2
symphonycmseq2.3.4
symphonycmseq2.2.5
symphonycmseq2.6.8
symphonycmseq2.0.7
symphonycmseq2.4

Name	Operator	Version
symphonycms	eq	2.5.3
symphonycms	eq	2.3.2beta2
symphonycms	eq	2.5.2-rc.1
symphonycms	eq	2.0.7RC2
symphonycms	eq	2.4RC2
symphonycms	eq	2.3.4
symphonycms	eq	2.2.5
symphonycms	eq	2.6.8
symphonycms	eq	2.0.7
symphonycms	eq	2.4