QwikSec

Security Database

CVE

CWE

Training

CVE-2020-2494

Published: Dec 10, 2020

Modified: Sep 17, 2024

PUBLISHED

Description

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3: Music Station 5.3.12 and later

Vendor	Product	Versions
QNAP Systems Inc.	Music Station	affected `< 5.3.13` affected `< 5.3.12`

Weaknesses (CWE)

References

https://www.qnap.com/en/security-advisory/qsa-20-13

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.