Qnap QTS Cross-site Scripting (CVE-2018-0716)

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application. This plugin only works with...

QNAP QTS < 4.2.6 build 20180829 XSS Vulnerability

QNAP QTS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

CVE-2018-0716

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application...

CVE-2018-0716

CVE-2018-0716 is a cross-site scripting vulnerability affecting QNAP QTS components, notably QTS 4.2.6 build 20180711 and QTS 4.3.x series (Qsync Central 3.0.2–3.0.4 and earlier). The underlying issue allows remote attackers to inject JavaScript in the compromised application. The connected docum...