Medium severity5.4NVD Advisory· Published Aug 29, 2025· Updated Jun 17, 2026
CVE-2024-12923
CVE-2024-12923
Description
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following version: Photo Station 6.4.5 ( 2025/01/02 ) and later
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*range: >=6.4.0,<6.4.5
- (no CPE)range: >=6.4.5
- Range: 6.4.x
Patches
Vulnerability mechanics
References
1- www.qnap.com/en/security-advisory/qsa-25-24nvdVendor Advisory
News mentions
0No linked articles in our index yet.