CVE-2017-6067

Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.