CVE-2019-11825
Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter.
Date published : 2019-06-30
https://www.synology.com/security/advisory/Synology_SA_19_04