Vulnerabilities > Qbittorrent > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-03-06 CVE-2017-6504 Improper Input Validation vulnerability in Qbittorrent
WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.
network
low complexity
qbittorrent CWE-20
6.1
6.1
2017-03-06 CVE-2017-6503 Cross-site Scripting vulnerability in Qbittorrent
WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
network
low complexity
qbittorrent CWE-79
6.1
6.1