CVE-2020-36196 – Stored XSS Vulnerability in QuLog Center

https://notcve.org/view.php?id=CVE-2020-36196

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0. Se ha reportado de una vulnerabilidad de tipo XSS almacenado que afecta al NAS de QNAP que ejecuta QuLog Center. • https://www.qnap.com/zh-tw/security-advisory/qsa-21-30 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) •