CVE-2021-34357

CVE-2021-34357 describes a cross-site scripting (XSS) vulnerability affecting QNAP devices running QmailAgent. The issue allows remote attackers to inject malicious code via the affected QmailAgent component, with exploitation potentially leading to user impact on affected pages. The vulnerabilit...

CVE-2021-34357 Reflected XSS Vulnerability in QmailAgent

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 2021/08/25 and...