Description
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.
Remediation
References
https://github.com/b3log/symphony/issues/860
Related Vulnerabilities
CVE-2015-3253 Vulnerability in maven package org.codehaus.groovy:groovy-all
CVE-2023-26486 Vulnerability in npm package vega
CVE-2023-28154 Vulnerability in npm package webpack
CVE-2021-33040 Vulnerability in npm package epubjs
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webmvc