VendorsGetsymphonysymphony3.0.0
Vulnerabilities

Getsymphony Symphony 3.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2020-15071
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.
Published 2020-08-11 · Modified
6.1EPSS 0.007
CVE-2020-25343
Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php
Published 2020-10-07 · Modified
5.4EPSS 0.007