CVE-2018-19954CWE-79CWE-80

The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station

published November 2, 2020

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00917 · 59.6th percentile
Weaknesses
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'); CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2020-11-02T15:57Z
EPSS history
Timeline
  • 02 NOV 15:57Z
    The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station
    cvelistv5