CVE-2017-16768

Published: 2017-12-27T17:29Z

Last Modified: 2024-11-21T03:16Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt