CVE-2017-6067: Getsymphony Symphony

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.

Affected products

• Getsymphony Symphony: version 2.6.9 only

Published 2017-03-27. Last modified 2026-06-17.