CVE-2024-32769 PUBLISHED CVSS 6.300000190734863 MEDIUM

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow remote attackers who have gained user access to inject malicious code. We have already fixed the vulnerability in the following version: Photo Station 6.4.3 ( 2024/07/12 ) and later

EPSS 0.12% · 30.3th percentile

Risk Scores

CVSS v3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
EPSS Score
0.12%
30.3th percentile

Affected Products

VendorProductVersions
QNAP Systems Inc.Photo Station6.4.x
qnapphoto_station6.4.0

Timeline

References

Open in Interactive Console →