Cross-Site Scripting Vulnerability in QuMagie by QNAP
CVE-2025-62857

2.2LOW

Key Information:

Vendor

QNAP
Status
Qumagie
Vendor
CVE Published:
2 January 2026

What is CVE-2025-62857?

A cross-site scripting vulnerability has been identified in QuMagie, allowing remote attackers to potentially exploit this weakness. Attackers may bypass existing security measures or gain unauthorized access to sensitive application data through crafted inputs. The vulnerability has been addressed in versions 2.8.1 and later of QuMagie, emphasizing the importance of updating to secure versions to mitigate potential risks.

Affected Version(s)

QuMagie 2.x < 2.8.1

References

https://www.qnap.com/en/security-advisory/qsa-25-49

CVSS V4

Score:
2.2
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tim Coen
.