CVE-2022-22682

MEDIUM 5.4CVE-2022-22682 · Published 12/07/2022 · updated 17/06/2026

In short

CVE-2022-22682 is a MEDIUM (CVSS 5.4) vulnerability affecting calendar (synology).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.4% of all vulnerabilities.
Fix: update to 2.4.5-10930 or later.

Package	Affected versions	Patched versions
calendar synology	`< 2.4.5-10930`	`2.4.5-10930`

Description

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

synology.com/security/advisory/Synology_SA_22_07 · Vendor Advisory

More vulnerabilities in calendar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

calendar

synology

< 2.4.5-10930

2.4.5-10930

More vulnerabilities in calendar

See all →