CVE-2021-34355

MEDIUM 5.4CVE-2021-34355 · Published 01/10/2021 · updated 17/06/2026

In short

CVE-2021-34355 is a MEDIUM (CVSS 5.4) vulnerability affecting photo station (qnap).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.1% of all vulnerabilities.
Fix: update to 5.7.13, 6.0.18, 5.4.10 or later.

Package	Affected versions	Patched versions
photo station qnap	`≥ 5.7.0, < 5.7.13≥ 6.0.0, < 6.0.18< 5.4.10`	`5.7.136.0.185.4.10`

Description

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 5.4.10 ( 2021/08/19 ) and later Photo Station 5.7.13 ( 2021/08/19 ) and later Photo Station 6.0.18 ( 2021/09/01 ) and later

References

qnap.com/en/security-advisory/qsa-21-42 · Mitigation

More vulnerabilities in photo station

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

photo station

qnap

≥ 5.7.0, < 5.7.13≥ 6.0.0, < 6.0.18< 5.4.10

5.7.136.0.185.4.10

Description

More vulnerabilities in photo station

See all →