CVE-2019-11825 — Synology / Calendar

CVE-2019-11825

Synology / Calendar PUBLISHED

Description (CNA)

Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter.

Affected (CNA)

Vendor / product	Versions
Synology / Calendar	affected unspecified before 2.3.0-0615

CWE

CWE-79

References

https://www.synology.com/security/advisory/Synology_SA_19_04

ADP enrichment

CVE

No English description supplied.

https://www.synology.com/security/advisory/Synology_SA_19_04