Description

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later

Related CPE's

Could not find any relations

References

https://www.qnap.com/en/security-advisory/qsa-25-49

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

Missing metrics for CVSS V

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Awaiting analysis

Published

2026-01-02T15:16:03.450

3 hours ago

Last modified

2026-01-02T16:45:26.640

2 hours ago