Unscored CVE-2017-12072 EUVD-2017-3658GHSA-6qhh-f5q8-f9mh

Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated …

Published Dec 20, 2017 · Updated Sep 17, 2024 · Assigned by synology

Description

Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter.

Affected products

Vendor	Product	Affected	Fixed
Synology	Photo Station	before 6.8.0-3456	—

References

https://www.synology.com/en-global/support/security/Synology_SA_17_80