CVE-2018-19951

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11...

CVE-2018-19951

CVE-2018-19951 is a Cross-Site Scripting (XSS) vulnerability in QNAP Music Station web interface. The root cause is insufficient input validation by the Music Station web application, enabling remote attackers to inject client-side code. Affected versions are QNAP Music Station prior to 5.1.13, p...