5 matches found
CVE-2020-15071
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...
CVE-2020-15071
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...
Cross site scripting
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...
CVE-2020-15071: Improper Neutralization of Input During Web Page Generation
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...
PT-2020-14163
Name of the Vulnerable Software and Affected Versions Symphony CMS version 3.0.0 Description The issue allows for XSS via the fields'name' variable to appendSubheading in the content/content.blueprintsevents.php file. Recommendations For Symphony CMS version 3.0.0, update to a version that includ...