CVE-2020-15071: Improper Neutralization of Input During Web Page Generation

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...

PT-2020-14163

Name of the Vulnerable Software and Affected Versions Symphony CMS version 3.0.0 Description The issue allows for XSS via the fields'name' variable to appendSubheading in the content/content.blueprintsevents.php file. Recommendations For Symphony CMS version 3.0.0, update to a version that includ...