CVE-2021-38677

CVE-2021-38677 affects QNAP QcalAgent and is a cross-site scripting (XSS) vulnerability. The issue arises from insufficient input sanitization in user-supplied data, enabling an attacker to inject malicious code via crafted input. Exploitation details are not provided in the accessible documents,...

CVE-2021-38677 Reflected XSS Vulnerability in QcalAgent

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later...

Qnap QcalAgent 跨站脚本漏洞

Qnap QcalAgent is a time management center from China Weilian Technology Qnap. It is used to manage personal schedules, share calendars with others, and share each other's schedules. QNAP QcalAgent suffers from a cross-site scripting vulnerability that stems from insufficient cleaning of...

Qnap QcalAgent 输入验证错误漏洞

Qnap QcalAgent is a time management center from China Weilian Technology Qnap. It is used to manage personal schedules, share calendars with others, and share each other's schedules. An input validation error vulnerability exists in QNAP QcalAgent that stems from not properly handling user input...

CVE-2021-38677

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later...