← CVE Intelligence

CVE-2017-13072

QNAP / App Center in QTS PUBLISHED

Description (CNA)

Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.

Affected (CNA)

Vendor / productVersions
QNAP / App Center in QTSaffected App Center in QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.