Cross-site Scripting Vulnerability in QNAP Photo Station
CVE-2018-0715
6.1MEDIUM
What is CVE-2018-0715?
A cross-site scripting vulnerability exists in QNAP Photo Station versions 5.7.0 and earlier, which allows remote attackers to inject malicious JavaScript code into the affected application. This can lead to unauthorized actions taken on behalf of users, potentially compromising user data and session information. It is essential for users to update their installations to mitigate these risks.
Affected Version(s)
Photo Station versions 5.7.0 and earlier