Qnap QES Cross-site Scripting (CVE-2020-2503)

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later. This plugin only works with Tenable.ot. Please visit...

CVE-2020-2503

creationtimestamp| type| source ---|---|--- 2020-12-24 07:54:39+00:00| seen| https://t.me/cibsecurity/21261 2020-12-30 08:27:26+00:00| seen| https://t.me/lslaxyz/503...

CVE-2020-2503 Stored cross-site scripting vulnerability in QES

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later...

CVE-2020-2503

CVE-2020-2503 is a stored cross-site scripting vulnerability affecting QNAP QES File Station. The underlying issue allows injected scripts to execute remotely if exploited. QNAP has fixed these issues in QES 2.1.1 Build 20201006 and later. The connected sources confirm the flaw and the patch, but...