CVE-2017-8876: Getsymphony Symphony

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php.

Affected products

• Getsymphony Symphony: version 2.6.11 only

Published 2017-05-10. Last modified 2026-06-17.