Skip to content
OpenAdvisories
Unscored CVE-2018-0716 EUVD-2018-1526GHSA-c872-gw93-ggqw

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: …

Published Nov 30, 2018 · Updated Aug 5, 2024 · Assigned by qnap

Vendor: QNAP Systems Product: Qsync Central

Description

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.

Affected products

VendorProductAffectedFixed
QNAP Qsync Central QTS 4.2.6 build 20180711, QTS 4.3.3 Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5 Qsync Central 3.0.4 and earlier versions —

References