CVE-2020-2502

Cross-site Scripting Vulnerability in Photo Station

EPSS 0.8%CWE-79 CWE-80

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.8%KEV nãoPoC —Patch —

Lifecycle

17 Feb 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. Photo Station 6.0.11 and later

Affected products

QNAP Systems Inc. · Photo Station

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.qnap.com/en/security-advisory/qsa-21-06