CVE-2019-7185

MEDIUM

QNAP Music Station < 5.3.5 - Stored Cross-Site Scripting

Title source: llm
STIX 2.1

Description

This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.

References (1)

Core 1
Core References

Scores

CVSS v3 4.8
EPSS 0.0021
EPSS Percentile 43.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
qnap/music_station < 5.3.5
Published Dec 05, 2019
Tracked Since Feb 18, 2026