Cross-site Scripting Vulnerability in Photo Station
CVE-2020-2502

6.1MEDIUM

Key Information:

Vendor: QNAP
Status: Photo Station
Vendor: CVE Published:; 17 February 2021

What is CVE-2020-2502?

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. Photo Station 6.0.11 and later

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Photo Station < 6.0.11

References

https://www.qnap.com/en/security-advisory/qsa-21-06

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Feb 17, 2021
Vulnerability Reserved
Dec 9, 2019

Credit

Paolo

JSON

QNAP