CVE-2026-49210 | Symfony up to 2.35.x/3.0.x LiveComponent createHtml cross site scripting

July 17, 2026 Yanac

A vulnerability marked as problematic has been reported in Symfony up to 2.35.x/3.0.x. The impacted element is the function createHtml of the component LiveComponent. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-49210. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More