CVE-2017-15892

Published: 2017-12-28T15:29Z

Last Modified: 2024-11-21T03:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt