Lucene search
Veracode Vulnerability DatabaseVERACODE:26318HistoryAug 11, 2020 - 11:13 p.m.
Cross-Site Scripting (XSS)
2020-08-1123:13:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
37.5%
Symphony CMS is susceptible to cross-site scripting (XSS). Lack of sanitization for the name field to appendSubheading, allowing an attacker to inject malicious script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| symphonycms/symphony-2 | le | 3.0.0 | |
| symphonycms/symphony-2 | le | 3.0.0 |
Related
cvelist
cvelist
CVE-2020-15071
2020-08-11 17:24:08
osv
osv
CVE-2020-15071
2020-08-11 18:15:13
nvd
nvd
CVE-2020-15071
2020-08-11 18:15:13
prion
prion
Cross site scripting
2020-08-11 18:15:00
cve
cve
CVE-2020-15071
2020-08-11 18:15:13
openvas
openvas
Symphony CMS <= 3.0.0 XSS Vulnerabilities
2020-08-14 00:00:00