Symphony Project Symphony vulnerabilities

• symphony project symphony b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain ... CVE-2017-16956 6.1 MediumNovember 27, 2017
• symphony project symphony b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by... CVE-2017-16881 6.1 MediumNovember 18, 2017