Skip to content
OpenAdvisories

Package · Packagist

symphonycms/symphony-2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2015-8766

    Symphony CMS XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3…

    symphonycms/symphony-2 Packagist
  • Low —
    CVE-2011-4340 Public exploit

    Symphony CMS vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profi…

    symphonycms/symphony-2 Packagist