Cross site scripting

Cross-site scripting XSS vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter...

CVE-2017-15890

Synology MailPlus Server is affected by a cross-site scripting (XSS) vulnerability in the Disclaimer module. The issue affects versions prior to 1.4.0-0415, where a remote authenticated user can inject arbitrary web script or HTML via the NAME parameter. Root cause is an unsanitized NAME input in...

CVE-2017-15890

Cross-site scripting XSS vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter...

Synology MailPlus - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Synology MailPlus published at the 'play' market has multiple vulnerabilities...