A cross-site scripting (XSS) vulnerability affects File Station 5, allowing a remote attacker with a user account to bypass security mechanisms or read application data. The vulnerability has been fixed in File Station 5 version 5.5.6.5018 and later.