A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')