Synology CardDAV Server Cross-Site Scripting Vulnerability

Synology CardDAV Server is a Synology application for synchronizing address books, and Address Book Editor is one of the address book editors. A cross-site scripting vulnerability exists in Address Book Editor in Synology CardDAV Server versions prior to 6.0.8-0086. The vulnerability can be...

Cross site scripting

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...