CVE-2018-13351
4.8 mediumEPSS 0.9%
Medium (4.8) in terra-master terramaster operating system. EPSS 0.9% chance of exploitation in the next 30 days.
Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the edit password form.
Severity
CVSS 3.0
4.8 mediumCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- terra-master:terramaster_operating_system
References
Check your stackJSON