CVE-2018-13359
TerraMaster TOS 3.1.03 is affected by a cross-site scripting vulnerability in usertable.php via the modgroup parameter, enabling attacker-supplied JavaScript. NVD lists CVE-2018-13359 with CVSS v3 base score 8.8 (HIGH): NETWORK vector, LOW complexity, NONE privileges, UI required, and HIGH impact...