{"action":"Upgrade symphonycms/symphony-2 to 2.6.4 or later.","affected":[{"fixed":"2.6.4","introduced":"0"}],"component":"symphonycms/symphony-2","cve_ids":["CVE-2015-8766"],"ecosystem":"Packagist","epss":0.01767,"exploited":false,"fixed_versions":["2.6.4"],"ghsa_id":"GHSA-4c5w-qqfg-grf3","id":"tcs_01M5KETW6G4VBPM6RW9G65Q6HH","modified_at":"2024-02-17T05:33:50.150452Z","published_at":"2022-05-13T01:13:58Z","references":["https://osv.dev/vulnerability/GHSA-4c5w-qqfg-grf3","https://nvd.nist.gov/vuln/detail/CVE-2015-8766","https://github.com/symphonycms/symphony-2/commit/651e150091c61fb60ad1dff2bc2166185a83d9d6","https://github.com/symphonycms/symphony-2","https://web.archive.org/web/20210321090853/https://cybersecurityworks.com/zerodays/cve-2015-8766-getsymphoney.html","http://seclists.org/fulldisclosure/2015/Dec/60","http://www.getsymphony.com/download/releases/version/2.6.4"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4c5w-qqfg-grf3","url":"https://osv.dev/vulnerability/GHSA-4c5w-qqfg-grf3"}],"summary":"Symphony CMS XSS Vulnerabilities"}