Vulnerabilities > Getsymphony > Symphony > 3.0.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-10-07 | CVE-2020-25343 | Cross-site Scripting vulnerability in Getsymphony Symphony 3.0.0 Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php | 3.5 |
| 2020-08-11 | CVE-2020-15071 | Cross-site Scripting vulnerability in Getsymphony Symphony 3.0.0 content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading. | 4.3 |