CVE:CVE-2019-7421
CNNVD:CNNVD-201902-577
SAMSUNG X7400GX Sync Thru Web Service V6.A6.25版本和V11.01.05.25_08-21-2015版本中存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade samsung syncthru_web_service to a higher version than -; Upgrade samsung x7400gx_firmware to a higher version than 6.a6.25,and avoid the version 6.a6.25