| Package | Affected versions | Patched versions |
|---|---|---|
| note station | ≤ 1.1-0212 |
Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) note title or (2) file name of attachments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free