Vulnerabilities > Getsymphony > Symphony > 3.0.0

DATE CVE VULNERABILITY TITLE RISK
2020-10-07 CVE-2020-25343 Cross-site Scripting vulnerability in Getsymphony Symphony 3.0.0
Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php
network
low complexity
getsymphony CWE-79
5.4
5.4
2020-08-11 CVE-2020-15071 Cross-site Scripting vulnerability in Getsymphony Symphony 3.0.0
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.
network
low complexity
getsymphony CWE-79
6.1
6.1