CVE-2020-2502 | BDVDB-2026-149267 Detail

QNAP SystemsPhoto Station

Description#

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. Photo Station 6.0.11 and later

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

References#

https://www.qnap.com/en/security-advisory/qsa-21-06

Exploit#

No public exploit known

History#

Version 12021-02-17Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.