4 matches found
CVE-2018-19620
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...
CVE-2024-41613
A Cross Site Scripting XSS vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note...
PT-2024-29463 · Unknown · Symphony Cms
Name of the Vulnerable Software and Affected Versions: Symphony CMS version 2.7.10 Description: A Cross Site Scripting XSS issue allows remote attackers to inject arbitrary web script or HTML by editing a note. This enables attackers to potentially execute malicious scripts on the victim's browse...
CVE-2024-41613
A Cross Site Scripting XSS vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note...