What is CVE-2024-50406?

CVE-2024-50406 is a medium-severity vulnerability in Qnap License_center, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2025-06-06.

How severe is CVE-2024-50406?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Qnap License_center

CVE-2024-50406

A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We hav…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Qnap License_center
Qnap Systems Inc. License Center — versions 1.9.x

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@qnapsecurity.com.tw (Vendor Advisory)

Frequently asked questions

What is CVE-2024-50406?: CVE-2024-50406 is a medium-severity vulnerability in Qnap License_center, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2025-06-06.
How severe is CVE-2024-50406?: Medium severity. CVSS v3 base score is 5.4 out of 10.