Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as demonstrated via requests to (a) the default URI, (b) about/, or (c) drafts/; or (2) the filter parameter in symphony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish/images. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symphony CMS跨站脚本漏洞
Vulnerability Description
Symphony CMS是一套采用PHP和MySQL开发的内容管理系统（CMS）。该系统支持搜索引擎优化、模块扩展等。 Symphony CMS中存在多个跨站脚本漏洞（XSS）。拥有作者权限的远程认证用户可利用该漏洞借助（1）extensions/profiledevkit/content/content.profile.php的profile参数，例如：被（a）默认URL （b）about/或（c）drafts/的请求证明；（2）symphony/lib/core/class.symphony.php的
CVSS Information
N/A
Vulnerability Type
N/A