medium4.8
CVE-2024-31160
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input.
Impact
The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Download Master | before 3.1.0.114 |