CVE-2024-50406 LOW

CVE-2024-50406: License Center

Vendor Qnap Systems Inc.

Product License Center

Weakness CWE-79 · XSS

Published June 6, 2025

Last update June 6, 2025

View on NVD All CVEs

CVSS base score

2.0/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

What the vulnerability does

01Description

A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: License Center 1.9.49 and later

Key dates

02Disclosure timeline

June 6, 2025 CVE published

June 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-50406

Related vulnerabilities

04Related CVE

CVE-2024-5259 MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter CVE-2024-3579 XSS in Online Shopping System Advanced CVE-2021-24665 WP Video Lightbox < 1.9.3 - Contributor+ Stored Cross-Site Scripting CVE-2015-10074 OpenSeaMap online_chart index.php init cross site scripting CVE-2023-3990 Mingsoft MCMS HTTP POST Request search.do cross site scripting