title: Stored XSS Vulnerability in QuLog Center
description: A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.
problem types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
affected:
{
product: QuLog Center
vendor: QNAP Systems Inc.
versions:
lessThan: 1.2.0, status: affected, version: unspecified, versionType: custom
}
solutions: QNAP have already fixed this vulnerability in the following versions:
QuLog Center 1.2.0 and later