Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.
getsymphony symphony 2.6.9