3 matches found
CVE-2019-10634
An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields...
Cross site scripting
An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields...
PT-2019-11953
Name of the Vulnerable Software and Affected Versions Zyxel NAS 326 versions 5.21 and below Description The issue allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields. This can lead to cross-site scripting XSS attacks...