← CVE Intelligence

CVE-2017-9556

Synology / Synology Video Station PUBLISHED

Description (CNA)

Cross-site scripting (XSS) vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter.

Affected (CNA)

Vendor / productVersions
Synology / Synology Video Stationaffected before 2.3.0-1435

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.