Skip to content

CVE-2017-8876 Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php.

MediumCVSS 6.1 EPSS 0.76%
Published
Updated
Exploit status
No public exploit known

Description

Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php.

Affected products

ProductAffected versionsFixed in
getsymphony symphony = 2.6.11 No fix listed

References

  • github.com issue-tracking patch third-party-advisory