Cross-site scripting (XSS) vulnerability in Q’center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.
[
{
"product": "Q'center Virtual Appliance",
"vendor": "QNAP",
"versions": [
{
"status": "affected",
"version": "Q'center Virtual Appliance 1.8.1014 and earlier versions"
}
]
}
]