A vulnerability allows remote attackers to inject arbitrary web script or HTML via a susceptible version of Note Station. Continue reading... - - - Source: synology.com