What is GHSA-3wcv-v3rv-jx98?

GHSA-3wcv-v3rv-jx98 is a security advisory published by GitHub Security Advisories with Medium severity. A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local...

Which CVE IDs does GHSA-3wcv-v3rv-jx98 cover?

GHSA-3wcv-v3rv-jx98 covers the following CVE IDs: CVE-2024-27123. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3wcv-v3rv-jx98Medium

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2024-27123 →

📋 Description

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-27123
https://www.qnap.com/en/security-advisory/qsa-24-54
https://github.com/advisories/GHSA-3wcv-v3rv-jx98