CVE-2017-16774

Cross-site scripting XSS vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager DSM before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter...

CVE-2017-16774

Synology DSM is affected by CVE-2017-16774 in the SYNO.Core.PersonalNotification.Event module. The vulnerability arises from insufficient validation of the package parameter, enabling remote authenticated users to inject arbitrary web script or HTML. Affected versions are DSM prior to 6.1.4-15217...