CVE-2021-34357

CVE-2021-34357 describes a cross-site scripting (XSS) vulnerability affecting QNAP devices running QmailAgent. The issue allows remote attackers to inject malicious code via the affected QmailAgent component, with exploitation potentially leading to user impact on affected pages. The vulnerabilit...

CVE-2021-34358

CVE-2021-34358 affects QmailAgent up to 3.0.1 and is a cross-site request forgery (CSRF) vulnerability. The issue is mitigated by upgrading to QmailAgent 3.0.2 (2021-08-25) or later, as stated in multiple sources. The CVSS details indicate a network-exposed, high-severity issue with user interact...