← CVE Intelligence

CVE-2020-2503

Stored cross-site scripting vulnerability in QES PUBLISHED

Description (CNA)

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / QESaffected unspecified before 2.1.1

CWE

CWE-79, CWE-80, CWE-749

References

ADP enrichment

CVE

No English description supplied.