CVE-2018-19951CWE-79CWE-80

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code

published November 2, 2020

CVSS
—
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00765 · 54.9th percentile
Weaknesses
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'); CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2020-11-02T15:57Z
EPSS history
Timeline
  • 02 NOV 15:57Z
    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code
    cvelistv5