CVE-2017-0912

CVE-2017-0912 affects Ubiquiti UCRM versions 2.5.0 to 2.7.7. The vulnerability is a stored Cross-site Scripting (XSS) flaw caused by insufficient sanitization, enabling injection of arbitrary HTML via the uploaded filename. Exploitation requires valid credentials and an account with Edit access t...