Medium severity5.4NVD Advisory· Published Dec 28, 2017· Updated Jun 17, 2026
CVE-2017-15892
CVE-2017-15892
Description
Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Synology/Chatv5Range: before 2.0.0-1124
Patches
Vulnerability mechanics
References
1- www.synology.com/en-global/support/security/Synology_SA_17_78nvdVendor Advisory
News mentions
0No linked articles in our index yet.