Unrated
content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.
CVE-2018-12043
First seen on SecPulse
References
- patch github.com