CVE-2019-10634

Publication date

2019-04-09 05:00:20

Family

mitre

State

PUBLISHED

Description

An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields.