Skip to content
OpenAdvisories
Unscored CVE-2020-2494 EUVD-2020-22287GHSA-jx9p-jf7x-8rr2

Cross-site Scripting Vulnerability in Music Station

Published Dec 10, 2020 · Updated Sep 17, 2024 · Assigned by qnap

Description

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3: Music Station 5.3.12 and later

Affected products

VendorProductAffectedFixed
QNAP Systems Music Station < 5.3.13, < 5.3.12 —

References