Cross-site Scripting (XSS)

symphonycms/symphony-2 is vulnerable to cross-site scripting XSS attacks. Attackers are able to inject web script through the following parameters in content/content.systempreferences.php: emailsendmailfromname, emailsendmailfromaddress, emailsmtpfromname, emailsmtpfromaddress, emailsmtphost,...

CVE-2015-8766

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...