Photo Station

versions 5.7.0 and earlier

OTHER 1 CVE

versions 5.4.3 and earlier for QTS 4.3.x

OTHER 1 CVE

versions 5.2.7 and earlier for QTS 4.2.x

OTHER 1 CVE

CVE-2018-0715

Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application.

UNKNOWN Aug 27, 2018

CVE-2017-13073

Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.

UNKNOWN Apr 23, 2018