MEDIUM 6.3 NVD

CVE-2026-47790

A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulne

A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP Service 1.5.5 and later QuFTP Service 1.6.5 and later

References

https://www.qnap.com/en/app-release-notes?keyword=QuFTP%20Service&app=QuFTP&product-line=n

Published: 2026-10-15 · Source: NVD · Feed updated: 2026-10-15

This medium severity vulnerability with a CVSS score of 6.3 was published on 2026-10-15 via NVD.

vulnfeed aggregates 14529 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.