CVE-2020-2493

Cross-site Scripting Vulnerability in Multimedia Console PUBLISHED

Description (CNA)

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.

Affected (CNA)

Vendor / product	Versions
QNAP Systems Inc. / Multimedia Console	affected < 1.1.5

CWE

CWE-79, CWE-80

References

https://www.qnap.com/en/security-advisory/qsa-20-14

ADP enrichment

CVE

No English description supplied.

https://www.qnap.com/en/security-advisory/qsa-20-14