TI-2017-09177 CVE-2017-12439 · GHSA-85rm-jm8v-379fSocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced…Priority LOW 34SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file.CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00639 · Published 2017-08-05 · No fix listed CWE-352