cve/2018/CVE-2018-11343.md

CVE-2018-11343

Description

A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the 'playlist' POST parameter.

POC

Reference

• http://seclists.org/fulldisclosure/2018/May/2
• http://seclists.org/fulldisclosure/2018/May/2

Github

• https://github.com/mefulton/asustorexploit