CVE-2025-62857
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.
Published Jan 2, 2026 · updated Oct 14, 2026 · qnap qumagie
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Timeline
Detection, updates, and resolution for this record.
Jan 2, 2026 · NIST NVD
Detected
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Oct 14, 2026 · NIST NVD
Updated
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Affected
- cpe qnap/qumagieversion unspecified
Sources
- CVE.orgCVE-2025-62857
Official CVE identifier
cve.org - NIST NVDCVE-2025-62857
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and lat
nvd.nist.gov