CVE-2017-12072

Published: 2017-12-20T18:29Z

Last Modified: 2024-11-21T03:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt