Lucene search
Veracode Vulnerability DatabaseVERACODE:4289HistoryMay 24, 2017 - 8:56 a.m.
Cross-site Scripting (XSS)
2017-05-2408:56:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
34.4%
symphonycms/symphony-2 is vulnerable to cross-site scripting (XSS) attacks. The attacks are possible because the user-supplied section’s name and navigation group input parameters in content/content.blueprintssections.php are not properly sanitized.
| CPE | Name | Operator | Version |
|---|---|---|---|
| symphonycms/symphony-2 | eq | 2.6.11 |
Related
cve
cve
CVE-2017-8876
2017-05-10 05:29:00
osv
osv
CVE-2017-8876
2017-05-10 05:29:00
cvelist
cvelist
CVE-2017-8876
2017-05-10 05:14:00
nvd
nvd
CVE-2017-8876
2017-05-10 05:29:00
prion
prion
Code injection
2017-05-10 05:29:00
openvas
openvas
Symphony CMS <= 2.6.11 RCE Vulnerability
2017-04-19 00:00:00