| Package | Affected versions | Patched versions |
|---|---|---|
| media streaming add-on | ≤ 421.1.0.2≤ 430.1.2.0 |
Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free