description: The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Photo Station
vendor: QNAP Systems Inc.
versions:
lessThan: 5.7.11, status: affected, version: unspecified, versionType: custom
lessThan: 6.0.10, status: affected, version: unspecified, versionType: custom
}
solutions: QNAP have already fixed these issues in the following versions of Photo Station:
QTS 4.3.6: Photo Station 5.7.11 and later
QTS 4.4.3: Photo Station 6.0.10 and later