CVE-2018-11343

A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the ‘playlist’ POST parameter.

Date published : 2018-05-21

http://seclists.org/fulldisclosure/2018/May/2

https://github.com/mefulton/asustorexploit