PT-2015-7400

Name of the Vulnerable Software and Affected Versions Synology Download Station versions prior to 3.5-2967 Description A cross-site scripting XSS issue exists in the "Create download task via URL" feature, allowing remote attackers to inject arbitrary web script or HTML via the urls parameter in ...