Description
Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
QNAP Systems Inc. QTS
unspecified to ≤ 4.2.6affected
QNAP Systems Inc. QTS
unspecified to ≤ 4.3.3affected
QNAP Systems Inc. QTS
unspecified to ≤ 4.3.4affected