CVE-2011-4340

CVE-2011-4340 describes multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS versions 2.2.3 and potentially earlier. These flaws allow authenticated users with Author privileges to inject malicious web script or HTML through specific parameters in the profile and filter functions. The vulnerability has a CVSS score of 3.5, indicating a medium attack complexity and requiring authentication, with a potential impact of partial integrity compromise. While there is no evidence of active exploitation, exploit code is publicly available on ExploitDB, and there is minimal community discussion or media coverage surrounding this CVE.