CVE-2018-0724: QNAP Q'center Virtual Appliance

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.

Affected products

• QNAP Q'center Virtual Appliance: up to and including 1.8.1014

Published 2018-12-26. Last modified 2026-06-17.