Description
A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following version:
QuLog Center 1.8.2.923 ( 2025/08/27 ) and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | QuLog Center | 1.8.x.x – < 1.8.2.923 ( 2025/08/27 ) | 1.8.2.923 ( 2025/08/27 ) |