VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 29, 2025· Updated Aug 29, 2025

Photo Station

CVE-2024-12923

Description

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version: Photo Station 6.4.5 ( 2025/01/02 ) and later

Affected products

1
  • QNAP Systems Inc./Photo Stationv5
    Range: 6.4.x

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.