← CVE Intelligence

CVE-2020-2494

Cross-site Scripting Vulnerability in Music Station PUBLISHED

Description (CNA)

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3: Music Station 5.3.12 and later

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / Music Stationaffected < 5.3.13; affected < 5.3.12

CWE

CWE-79, CWE-80

References

ADP enrichment

CVE

No English description supplied.