Description
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
Unscored
CVE-2017-16956
EUVD-2017-8125GHSA-x6vj-q2p5-mvjj
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter wi…
Published Nov 27, 2017 · Updated Aug 5, 2024 · Assigned by mitre