medium6.1
CVE-2020-2494
This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code.
Impact
This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3: Music Station 5.3.12 and later
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Music Station | before 5.3.13 before 5.3.12 |