CVE-2019-11828
Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Date published : 2019-06-30
https://www.synology.com/security/advisory/Synology_SA_19_11