QNAP License Center Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability exists in QNAP License Center versions 1.8.x and 1.9.x. This vulnerability allows remote attackers with administrator access to bypass security mechanisms or access application data.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

To address this vulnerability, users should update QNAP License Center to version 1.8.51 or later for the 1.8.x series, and to version 1.9.51 or later for the 1.9.x series.