MOABI : Continuous Software Improvement

CVE-2015-9104
Description	Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title.
Impact	CVSS v3 : 5.4 MEDIUM CVSS v2 : 3.5 LOW
Type	CWE-79
Attack Vector	CVSSv2 Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N
Quick links	CVE, NVD, CERT, Metasploit, Exploit-db, Fulldisc, Bugtraq, Microsoft, Red Hat, Debian, GitHub code/issues, Google
References	http://www.fortiguard.com/zeroday/FG-VD-15-106 https://www.synology.com/en-global/support/security/Audio_Station_5_4_2857