CVE-2019-7185

This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.

Score

CVSS 3.1 4.8 Medium

Status

Modified - security@qnapsecurity.com.tw

Published

2019-12-05

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Music Station (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201911-27