Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-11825 EUVD-2019-3491GHSA-x5gw-2qjg-7h6j

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary…

Published Jun 30, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Calendar

Description

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter.

Affected products

VendorProductAffectedFixed
Synology Calendar unspecified – < 2.3.0-0615 2.3.0-0615

References