title: Cross-site Scripting Vulnerability in Photo Station
description: This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. Photo Station 6.0.11 and later
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Photo Station
vendor: QNAP Systems Inc.
versions:
lessThan: 6.0.11, status: affected, version: unspecified, versionType: custom
}
solutions: QNAP We have already fixed this vulnerability in the following versions of Photo Station.
Photo Station 6.0.11 and later