medium5.4
CVE-2019-10634
An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, gr…
Impact
An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | Nas326 Firmware | through 5.21 |