Read the docs

SocuSoft

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

SocuSoft records in CISA KEV

No SocuSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Flash Slideshow Maker · all components

Priority LOW 34

SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00639 Published 2017-08-05 No fix listed CWE-352
Open these records in search →