CVE-2018-19956

CVE-2018-19956 is a cross-site scripting (XSS) vulnerability affecting QNAP Photo Station. Affected are Photo Station versions before 5.7.11 and before 6.0.10. The issue arises from insufficient input validation in the Photo Station web application, enabling remote attackers to inject malicious c...