Security Advisory
CVE-2017-5542
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter.
Published Date
January 20, 2017
Official Source
NIST NVD Advisory