Synology Download Station Cross-Site Scripting Vulnerability

Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via file upload' feature of Synology Download Station prior to version 3.5-2962, which can be exploited to inject arbitrary web script or...