Stored XSS Vulnerability in Image2PDF

Summary

A stored cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code.

We have already fixed this vulnerability in the following versions of Image2PDF: 

• Image2PDF 2.1.5 (2021/08/17) and later

Recommendation

To fix the vulnerability, we recommend updating Image2PDF to the latest version.

Updating Image2PDF

1. Log on to QTS or QuTS hero as administrator.
2. Open the App Center and then click .
   A search box appears.
3. Type “Image2PDF” and then press ENTER.
   Image2PDF appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your version is already up to date.
5. Click OK.
   The application is updated.