Skip to main content

Symphony Cms

2 CVEs product

Monthly

CVE-2024-41614 MEDIUM POC This Month

symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Symphony Cms
NVD GitHub
CVSS 3.1
4.8
EPSS
0.3%
CVE-2024-41613 MEDIUM POC This Month

A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Symphony Cms
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
EPSS 0% CVSS 4.8
MEDIUM POC This Month

symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Symphony Cms
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM POC This Month

A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Symphony Cms
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy