CVE-2020-36196

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.

• CWE-80
• CWE-79

• https://www.qnap.com/zh-tw/security-advisory/qsa-21-30Vendor Advisory
• https://www.qnap.com/zh-tw/security-advisory/qsa-21-30Vendor Advisory

Published

Jul 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36190RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0…6.1
• CVE-2020-36191JupyterHub 1.1.0 allows CSRF in the admin panel via a reques…4.5
• CVE-2020-36192An issue was discovered in the Source Integration plugin bef…5.3
• CVE-2020-36193Tar.php in Archive_Tar through 1.4.11 allows write operation…7.5
• CVE-2020-36194An XSS vulnerability has been reported to affect QNAP NAS ru…6.1
• CVE-2020-36195An SQL injection vulnerability has been reported to affect Q…9.8
• CVE-2020-36197An improper access control vulnerability has been reported t…8.8
• CVE-2020-36198A command injection vulnerability has been reported to affec…6.7
• CVE-2020-36199TinyCheck before commits 9fd360d and ea53de8 was vulnerable …9.8
• CVE-2020-3620u'Lack of check of integer overflow while doing a round up o…5.5
• CVE-2020-36200TinyCheck before commits 9fd360d and ea53de8 allowed an auth…6.5
• CVE-2020-36201An issue was discovered in certain Xerox WorkCentre products…7.5