CVE-2018-13331

Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing users by placing JavaScript in their usernames.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-11-27

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Terramaster Operating System (Terra-master)

References

• https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a