CVE-2017-16956
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
Published: 2017-11-27 · CVSS: Unscored
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7