CVE-2017-9555 - AskarLabs CVE Database

CVE-2017-9555

Vendor Synology

Product Synology Photo Station

Weakness CWE-79 · XSS

Published August 24, 2017

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter.

Key dates

02Disclosure timeline

August 24, 2017 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-9555 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-11276 Rebuild Comment/Guestbook cross site scripting CVE-2026-22467 WordPress DeepDigital theme <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-59999 Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection CVE-2025-34309 IPFire < v2.29 Stored XSS via Dynamic DNS Host CVE-2023-3184 SourceCodester Sales Tracker Management System cross site scripting