CVE-2018-19953 QNAP Network Attached Storage (NAS)
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
- CVSS
- not scored
On CISA’s exploited list
QNAP NAS File Station Cross-Site Scripting Vulnerability
- Added
- 2022-05-24
- Federal patch deadline
- 2022-06-14
- Ransomware use
- known