CVE-2022-22682

Publication date

2022-07-12 06:20:10

Family

synology

State

PUBLISHED

Description

Improper neutralization of input during web page generation (Cross-site Scripting) vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.