QNAP NAS File Station Cross-Site Scripting Vulnerability

Known Exploited Vulnerability

CVE-2018-19953, QNAP NAS File Station Cross-Site Scripting Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

The following remediation steps are recommended / required by June 14, 2022: Apply updates per vendor instructions.