CVE-2018-12043

content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page...

CVE-2018-12043

Symphony CMS 2.7.6 is affected by a cross-site scripting (XSS) vulnerability in content/content.blueprintspages.php, via the pages content page. The root cause is lack of sanitization of the page parameter, enabling insertion of arbitrary web script/HTML. The CVE descriptions consistently identif...

PT-2018-10965

Name of the Vulnerable Software and Affected Versions Symphony version 2.7.6 Description The issue is related to a cross-site scripting XSS problem. It affects the content/content.blueprintspages.php file in Symphony. Recommendations For Symphony version 2.7.6, at the moment, there is no...

CVE-2018-12043: Improper Neutralization of Input During Web Page Generation

content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page...