contacts vulnerabilities
CVEs whose affected-version data names the contacts package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-13167Medium· 5.4Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files contai…
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users to read or write specific files contai…
▾ Sunlitsynology · contactsEPSS 0.25%via NVD
CVE-2025-66554Low· 3.5Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing
Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS…
▾ Sunlitnextcloud · contactsEPSS 0.25%via NVD