CVE-2019-7197

Description

A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.

References

https://www.qnap.com/zh-tw/security-advisory/nas-201911-26

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3