VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 27, 2018· Updated Jun 17, 2026

CVE-2018-13333

CVE-2018-13333

Description

Cross-site scripting in File Manager in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript in the permissions window by placing JavaScript in users' usernames.

Affected products

2
  • Terra Master/Tosinferred2 versions
    = 3.1.03+ 1 more
    • (no CPE)range: = 3.1.03
    • (no CPE)range: 3.1.03

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.