3 matches found
CVE-2017-16956
b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...
6.1CVSS5.8AI score0.00745EPSS
SaveExploits1References1
Cross site scripting
b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...
4.3CVSS6AI score0.00745EPSS
SaveExploits1References1Affected Software1
CVE-2017-16956: Improper Neutralization of Input During Web Page Generation
b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...
6.1CVSS6.3AI score0.00745EPSS
SaveExploits1References2
20