{"id":"CVE-2018-19953","revision":"233fc4c019de432c8a5ea00aa5fef244","records":[{"revision":"233fc4c019de432c8a5ea00aa5fef244","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2018-19953","aliases":[],"title":"If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130;…","description":"If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.","state":0,"publishedAt":"2020-10-28T17:55:18+00:00","modifiedAt":"2026-10-01T19:26:08.359+00:00","affected":[{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200302\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.4.2.1231\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200130\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.4.1.1201\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200214\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.3.6.1218\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200107\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.3.4.1190\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200109\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.3.3.1161\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"lessThan\": \"4.2.6\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.qnap.com/zh-tw/security-advisory/qsa-20-01"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2018-19953","license":"CVE Program Terms of Use","key":"cve-program:CVE-2018-19953","identifiers":["CVE-2018-19953"]},"retained":false,"historicalAffected":[]}],"coverage":[]}