Symphony Cms Security Vulnerabilities and Issues — Symphony Cms CVE List

Lucene search

Symphony-cmsSymphony Cms

4 matches found

CVE•added 2024/08/13 5:15 p.m.•45 views

CVE-2024-41613

A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note.

6.1CVSS5.9AI score0.00025EPSS

CVE•added 2024/08/13 5:15 p.m.•39 views

CVE-2024-41614

symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.

4.8CVSS6.1AI score0.00025EPSS

CVE•added 2012/02/12 10:55 p.m.•37 views

CVE-2011-4341

Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to (1) symphony/publish/comments or (2) s...

4.3CVSS7.1AI score0.01785EPSS

CVE•added 2012/02/12 10:55 p.m.•32 views

CVE-2011-4340

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as...

3.5CVSS5.6AI score0.01713EPSS