Synology Contacts vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Synology Contacts: 1 record(s), with affected versions and fixes.
cpe:2.3:a:synology:contacts

CVE-2025-13167 Medium · 5.4 CWE-79 May 27, 2026

Cross-site Scripting (XSS) in Synology Contacts

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files containing non-sensitive information via unspecified vectors.