← CVE Intelligence

CVE-2018-0716

QNAP / Qsync Central PUBLISHED

Description (CNA)

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.

Affected (CNA)

Vendor / productVersions
QNAP / Qsync Centralaffected QTS 4.2.6 build 20180711, QTS 4.3.3 Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5 Qsync Central 3.0.4 and earlier versions

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.