ZeroHour

CVE-2020-2493

CVSS 3.1
6.1 medium
EPSS
<1%p53
Published
()
Modified
Description

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.

Vendors
qnap
Products
multimedia console
Weakness
CWE-79, CWE-80
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news