4 matches found
Code injection
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
4.3CVSS5.9AI score0.00802EPSS
SaveExploits0References1Affected Software1
CVE-2019-9142
An issue was discovered in b3log Symphony aka Sym before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java...
6.1CVSS6.4AI score0.00802EPSS
SaveExploits0References1
CVE-2019-9142
The CVE-2019-9142 issue affects b3log Symphony (Sym) prior to v3.4.7. The vulnerability is an XSS flaw exposed via userIntro and userNickname fields in processor/SettingsProcessor.java. Connections across multiple sources confirm the root cause is input handling in SettingsProcessor.java, leading...
6.1CVSS5.9AI score0.00802EPSS
SaveExploits0References1Affected Software1
20