CVE-2020-36194

6.1 mediumEPSS 0.6%

Medium (6.1) in qnap. EPSS 0.6% chance of exploitation in the next 30 days.

An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202. QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 build 20210414. This issue does not affect: QNAP Systems Inc. QTS 4.5.3.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-07-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:qts
qnap:quts_hero

References

https://www.qnap.com/zh-tw/security-advisory/qsa-21-32
https://www.qnap.com/zh-tw/security-advisory/qsa-21-32

Check your stack JSON