Cross-Site Scripting (XSS) Vulnerability in TerraMaster TOS 3.1.03 File Manager

Cross-Site Scripting (XSS) Vulnerability in TerraMaster TOS 3.1.03 File Manager

CVE-2018-13333 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

Cross-site scripting in File Manager in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript in the permissions window by placing JavaScript in users' usernames.

Learn more about our User Device Pen Test.