CVE-2018-8915: XSS
Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-8915?
CVE-2018-8915 is a cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before version 2.1.1-0502.
How can remote authenticated users exploit CVE-2018-8915?
Remote authenticated users can exploit CVE-2018-8915 by injecting arbitrary web script or HTML via the title parameter.
What is the severity of CVE-2018-8915?
CVE-2018-8915 has a severity rating of medium with a CVSS score of 5.4.
Which software versions are affected by CVE-2018-8915?
The cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar affects versions up to and excluding 2.1.1-0502.
How can I fix CVE-2018-8915?
To fix CVE-2018-8915, it is recommended to upgrade to Synology Calendar version 2.1.1-0502 or later.