Lucene search
Veracode Vulnerability DatabaseVERACODE:27546HistoryOct 08, 2020 - 5:06 a.m.
Cross-site Scripting (XSS)
2020-10-0805:06:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
48.6%
symphonycms/symphony-2 is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script or HTML into the fields['body'] param via events\event.publish_article.php when a user visits the page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| symphonycms/symphony-2 | eq | 3.0.0 |
References
Related
cvelist
cvelist
CVE-2020-25343
2020-10-07 13:55:32
prion
prion
Cross site scripting
2020-10-07 14:15:00
nvd
nvd
CVE-2020-25343
2020-10-07 14:15:11
osv
osv
CVE-2020-25343
2020-10-07 14:15:11
cve
cve
CVE-2020-25343
2020-10-07 14:15:11
openvas
openvas
Symphony CMS <= 3.0.0 XSS Vulnerabilities
2020-08-14 00:00:00