Synology.com suffered from a cross site scripting vulnerability.