Cross-site Scripting (XSS)

symphonycms/symphony-2 is vulnerable to cross-site scripting XSS attacks. Attackers are able to inject web script through the following parameters in content/content.systempreferences.php: emailsendmailfromname, emailsendmailfromaddress, emailsmtpfromname, emailsmtpfromaddress, emailsmtphost,...