Synology Office Cross-Site Scripting Vulnerability

Synology Office is a web-based office software system from Synology. Title Tootip is a component of Synology Office that allows you to create documents and spreadsheets online and import local files. A cross-site scripting vulnerability exists in the Title Tootip component in Synology Office...

CVE-2018-8924: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name...