QNAP License Center Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting (XSS) vulnerability exists in QNAP License Center versions 1.9.x. This vulnerability allows remote attackers with user access to bypass security measures or access application data.
Impact
Exploitation of this vulnerability could lead to cross-site scripting, allowing attackers to inject malicious scripts that could be executed in the context of the user's session.
Remediation
Users are advised to update QNAP License Center to version 1.9.49 or later. Instructions for updating are available on the QNAP website.
Added: Jun 6, 2025, 4:38 PM
Updated: Jun 6, 2025, 4:38 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.0remediation
7.7relevance
0.1threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.