Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-8915 EUVD-2018-20523GHSA-jc52-h9fr-wjmq

Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to…

Published May 10, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Calendar

Description

Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter.

Affected products

VendorProductAffectedFixed
Synology Calendar unspecified – < 2.1.1-0502 2.1.1-0502

References