Symphony Security Vulnerabilities and Issues — Symphony CVE List

Lucene search

GetsymphonySymphony

2 matches found

CVE•added 2020/08/11 6:15 p.m.•29 views

CVE-2020-15071

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2020/10/07 2:15 p.m.•28 views

CVE-2020-25343

Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php

5.4CVSS5.7AI score0.00135EPSS