Symphony CMS Cross-Site Scripting Vulnerability (CNVD-2020-49577)

Symphony CMS is a PHP + MySQL based , using XML and XSLT as the backbone of the open source content management system . A cross-site scripting vulnerability exists in content/content.blueprintsevents.php in Symphony CMS 3.0.0. The vulnerability can be exploited by an attacker to conduct a...

Cross-Site Scripting (XSS)

Symphony CMS is susceptible to cross-site scripting XSS. Lack of sanitization for the name field to appendSubheading, allowing an attacker to inject malicious script through it...

CVE-2020-15071

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...