Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-9556

Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script o

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Synology Video Station

  • before 2.3.0-1435affected

References