CVE-2017-16956

b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title

published November 27, 2017

CVSS
—
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00745 · 54.0th percentile
Published
2017-11-27T10:00Z
EPSS history
Timeline
  • 27 NOV 10:00Z
    b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title
    cvelistv5