CVE-2020-2503

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

Score

CVSS 3.1 9.0 Critical

Status

Modified - security@qnapsecurity.com.tw

Published

2020-12-24

Last modified

2024-09-17

Weaknesses

CWE-749, CWE-79, CWE-80

Affected products

• Qes (Qnap)
• Qes (Qnap Systems Inc.)

References

• https://www.qnap.com/zh-tw/security-advisory/qsa-20-17