Skip to content
OpenAdvisories

Package · Packagist

symphonycms/symphony-2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    CVE-2011-4340 Public exploit

    Symphony CMS vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profi…

    symphonycms/symphony-2 Packagist