CVE-2017-6067

Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...

CVE-2017-6067: Improper Neutralization of Input During Web Page Generation

Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...

PT-2017-16875

Name of the Vulnerable Software and Affected Versions Symphony version 2.6.9 Description The issue concerns a problem with the software where an attacker can inject malicious code. This is possible through the publish/notes/edit//saved/ endpoint, specifically via the bottom form field...