description: Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) note title or (2) file name of attachments.
problem types: Cross Site Scripting (CWE-79)
affected:
{
product: Note Station
vendor: Synology
versions:
status: affected, version: 1.0
status: affected, version: 1.1
}