← CVE Intelligence

CVE-2017-7634

QNAP / QNAP Media Streaming Add-On PUBLISHED

Description (CNA)

Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page.

Affected (CNA)

Vendor / productVersions
QNAP / QNAP Media Streaming Add-Onaffected 421.1.0.2, 430.1.2.0, and earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.