CVE-2017-8876

Symphony 2 2.6.11 has XSS in the metanavigationgroup parameter to content/content.blueprintssections.php...

CVE-2017-8876: Improper Neutralization of Input During Web Page Generation

Symphony 2 2.6.11 has XSS in the metanavigationgroup parameter to content/content.blueprintssections.php...

PT-2017-18598

Name of the Vulnerable Software and Affected Versions Symphony 2 version 2.6.11 Description The issue concerns a problem with the metanavigation group parameter in the content/content.blueprintssections.php file, which can lead to XSS. Recommendations For Symphony 2 version 2.6.11, avoid using th...