Security Advisory

CVE-2022-22682

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-07-12 06:20:10
Last updated 2024-09-17 00:20:46
Assigner synology
State PUBLISHED

Description

Improper neutralization of input during web page generation (Cross-site Scripting) vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.