JVN#63556416: QNAP Photo Station vulnerable to cross-site scripting

2018-08-31T00:00:00
ID JVN:63556416
Type jvn
Reporter Japan Vulnerability Notes
Modified 2018-08-31T00:00:00

Description

## Description

Photo Station provided by QNAP Systems, Inc. contains a reflected cross-site scripting vulnerability (CWE-79).

## Impact

An arbitrary script may be executed on the user's web browser.

## Solution

Update the Software
Update to the latest version according to the information provided by the developer.

## Products Affected

  • Photo Station version 5.7.0 and earlier