CVE-2026-40541 - An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-9548 [中危] CVE-2026-9548 - An improper neutralization of input during web page ge…
• CVE-2026-82123 [中危] CVE-2026-82123 - Improper neutralization of input during web page gene…
• CVE-2026-78238 [未知] CVE-2026-78238 - SOY Gallery contains a cross-site scripting vulnerab…
• CVE-2026-77838 [未知] CVE-2026-77838 - SOY Calendar contains a cross-site scripting vulnerab…
• CVE-2026-73827 [未知] CVE-2026-73827 - SOY Calendar contains a cross-site scripting vulnerab…
• CVE-2026-6286 [高危] CVE-2026-6286 - The Booking for Appointments and Events Calendar – Ame…
• CVE-2026-4246 [中危] CVE-2026-4246 - The ElementsKit Pro plugin for WordPress is vulnerable…
• CVE-2026-40541 [危急] CVE-2026-40541 - An improper neutralization of input during web page g…