CVE-2020-2502 Cross-site Scripting Vulnerability in Photo Station

2021-02-1700:00:00

CWE-80

CWE-79

qnap

www.cve.org

0.001 Low

EPSS

Percentile

45.3%

JSON

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. Photo Station 6.0.11 and later

CNA Affected

[
  {
    "product": "Photo Station",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "6.0.11",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.qnap.com/en/security-advisory/qsa-21-06

0.001 Low

EPSS

Percentile

45.3%

JSON

Related for CVELIST:CVE-2020-2502