CVE-2017-16956 b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
MediumCVSS 6.1
EPSS 0.75%
- Published
- Updated
- Exploit status
- No public exploit known
Description
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symphony project symphony | = 2.2.0 | No fix listed |
References
- github.com exploit issue-tracking third-party-advisory