CVE-2018-0723

Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@qnapsecurity.com.tw

Published

2018-12-26

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Q'center Virtual Appliance (Qnap)
• Qcenter Virtual Appliance (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201812-26