CVE-2017-7694: Getsymphony Symphony

High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor.

Affected products

• Getsymphony Symphony: up to and including 2.6.11

Published 2017-04-11. Last modified 2026-06-17.