CVE-2015-8766: XSS Vulnerabilities in Symphony CMS