PT-2020-16070

Name of the Vulnerable Software and Affected Versions Symphony CMS version 3.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML into the fields'body' parameter via the events/event.publish article.php endpoint. This is a cross-site scripting XSS issue...