Lucene search
+L

3 matches found

OSV
OSV
•added 2017/11/27 10:29 a.m.•14 views

CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

6.1CVSS5.8AI score0.00745EPSS
SaveExploits1References1
Prion
Prion
•added 2017/11/27 10:29 a.m.•28 views

Cross site scripting

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

4.3CVSS6AI score0.00745EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/27 12:00 a.m.•4 views

CVE-2017-16956: Improper Neutralization of Input During Web Page Generation

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

6.1CVSS6.3AI score0.00745EPSS
SaveExploits1References2
Rows per page
Query Builder