← Back to CVE List

CVE-2017-16956

Published: 2017-11-27T10:29Z
Last Modified: 2024-11-21T03:17Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt