Skip to content

CVE-2018-16249 In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points....

MediumCVSS 4.8 EPSS 0.52%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin-authenticated user via a crafted web site name.

Affected products

ProductAffected versionsFixed in
b3log symphony < 3.3.0 3.3.0

References

  • github.com exploit issue-tracking third-party-advisory