CVE-2021-34357

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 2021/08/25 and...

PT-2021-20471

Name of the Vulnerable Software and Affected Versions: QNAP QmailAgent versions prior to 3.0.2 Description: A cross-site scripting XSS issue has been reported, allowing remote attackers to inject malicious code. Recommendations: For QNAP QmailAgent versions prior to 3.0.2, update to QmailAgent...