Lucene search
SynologyCVELIST:CVE-2017-12072HistoryDec 20, 2017 - 6:00 p.m.
CVE-2017-12072
2017-12-2018:00:00
CWE-79
synology
www.cve.org
3
EPSS
0.001
Percentile
21.6%
Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter.
CNA Affected
[
{
"product": "Photo Station",
"vendor": "Synology",
"versions": [
{
"status": "affected",
"version": "before 6.8.0-3456"
}
]
}
]Related
nvd
nvd
CVE-2017-12072
2017-12-20 18:29:00
prion
prion
Cross site scripting
2017-12-20 18:29:00
openvas
openvas
cve
cve
CVE-2017-12072
2017-12-20 18:29:00