medium6.1
CVE-2019-9142
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7.
Impact
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| B3log | Symphony | before 3.4.7 |