Skip to content
OpenAdvisories
Unscored CVE-2017-13073 EUVD-2017-4591GHSA-8wjw-3m53-2385

Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allo…

Published Apr 23, 2018 · Updated Sep 16, 2024 · Assigned by qnap

Vendor: QNAP Systems Product: Photo Station

Description

Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.

Affected products

VendorProductAffectedFixed
QNAP Photo Station versions 5.4.3 and earlier for QTS 4.3.x, versions 5.2.7 and earlier for QTS 4.2.x —

References