ASUSTOR SoundsGood Application Cross-Site Scripting Vulnerability

SUSTOR SoundsGood is a web-based audio/video playback application from ASUSTOR for use on ASUSTOR NAS storage systems. A cross-site scripting vulnerability exists in the playlistmanger.cgi file in the ASUSTOR SoundsGood application. A remote attacker can exploit the vulnerability by injecting...

Cross site scripting

A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the 'playlist' POST parameter...

CVE-2018-11343

ASUSTOR SoundsGood's playlistmanger.cgi is vulnerable to persistent XSS via the playlist POST parameter. The cited CNVD entry states a remote attacker can inject arbitrary script/HTML and notes the payload could potentially lead to obtaining a valid SID value. The vulnerability details (affected ...