CVE-2018-0715

Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@qnapsecurity.com.tw

Published

2018-08-27

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Photo Station (Qnap)

References

• https://www.exploit-db.com/exploits/45348/
• https://www.qnap.com/zh-tw/security-advisory/nas-201808-23