4 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...
CVE-2018-8924
Cross-site scripting XSS vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...
CVE-2018-8924
Cross-site scripting XSS vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...
PT-2018-18722
Name of the Vulnerable Software and Affected Versions Synology Office versions prior to 3.0.3-2143 Description A cross-site scripting XSS issue exists in the Title Tooltip of Synology Office, allowing remote authenticated users to inject arbitrary web script or HTML via a malicious file name...