CVE-2019-11827

The vulnerability CVE-2019-11827 is a cross-site scripting flaw in Synology Note Station (SYNO.NoteStation.Shard) prior to version 2.5.3-0863. The issue arises from insufficient validation of the object_id parameter, enabling an attacker to inject arbitrary web script or HTML. Affected software: ...