CVE-2017-13073: QNAP Photo Station

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in QNAP NAS application Photo Station versions 5.2.7, 5.4.3, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.

Affected products

• QNAP Photo Station: from 5.2.0, up to and including 5.2.7; from 5.4.0, up to and including 5.4.3

Published 2018-04-23. Last modified 2026-06-17.