3 matches found
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
6.5CVSS5.9AI score0.00803EPSS
SaveExploits0References1
CVE-2018-8915
The CVE concerns Synology Calendar’s Notification Center where an XSS vulnerability exists in the title parameter for versions before 2.1.1-0502. Remote authenticated users can inject arbitrary web script or HTML by supplying a crafted title, potentially impacting user sessions or data displayed ...
6.5CVSS5.1AI score0.00803EPSS
SaveExploits0References1Affected Software1
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
6.5CVSS5.9AI score0.00803EPSS
SaveExploits0References1
20