CVE-2018-0716

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@qnapsecurity.com.tw

Published

2018-11-30

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Qsync Central (Qnap)
• Qts (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201811-29