CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386

CVE-2017-7386 affects citymont/symetrie v.0.9.6, which is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter). The root cause is a reflected XSS in the page.php handler for the model parameter. Documented impact is that arbitrary script/HTML could be injected ...