PT-2017-14270

Name of the Vulnerable Software and Affected Versions Synology Chat versions prior to 2.0.0-1124 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Slash Command Creator component. These vulnerabilities allow remote authenticated users to inject arbitrary web...

CVE-2017-15892: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...