CVE-2017-15890 - AskarLabs CVE Database

CVE-2017-15890

Vendor Synology

Product MailPlus Server

Weakness CWE-79 · XSS

Published December 15, 2017

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Cross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter.

Key dates

02Disclosure timeline

December 15, 2017 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-15890 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-67960 WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability CVE-2023-49276 Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma CVE-2024-56252 WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability CVE-2023-1783 OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering CVE-2025-23484 WordPress Predict When plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability