CVE-2023-47561
Photo Station
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Photo Station
| Assigner | qnap |
| Reserved | 2023-11-06 |
| Published | 2024-02-02 |
| Updated | 2024-08-02 |
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later
| CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L |
lebr0nli (Alan Li), working with DEVCORE Internship Program
https://www.qnap.com/en/security-advisory/qsa-24-08
