CVE-2017-12439: Socusoft Flash Slideshow Maker

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file. This has resultant content forgery, cross site scripting, and unvalidated redirection issues.

Affected products

• Socusoft Flash Slideshow Maker: up to and including 5.20

Published 2017-08-05. Last modified 2026-06-17.