CVE-2018-9177

The CVE-2018-9177 entry documents a cross-site scripting (XSS) vulnerability in Twonky Server prior to version 8.5.1 , exploitable via a folder name on the Shared Folders screen. The affected component is the web UI handling folder names, with the root cause being improper handling/encoding of us...