CVE-2015-8376 Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter t...
MediumCVSS 6.1
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter to blueprints/sections/edit/1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getsymphony symphony | = 2.6.3 | No fix listed |
References
- 20151223 Re: [FD] Symfony CMS 2.6.3 ââ¬â Multiple Cross-Site Scripting Vulnerability exploit mailing-list
- 20151209 Symfony CMS 2.6.3 ââ¬â Multiple Cross-Site Scripting Vulnerability exploit mailing-list