← CVE Intelligence

CVE-2017-15892

Synology / Chat PUBLISHED

Description (CNA)

Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.

Affected (CNA)

Vendor / productVersions
Synology / Chataffected before 2.0.0-1124

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.