CVE-2018-16960: Buffalo Open Xdmod

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter.

Affected products

• Buffalo Open Xdmod: up to and including 7.5.0

Published 2019-05-02. Last modified 2026-06-17.