CVE-2023-3937 MEDIUM

CVE-2023-3937: Cross site scripting vulnerabilities in Snow License Manager

Vendor Snow Software
Product Snow License Manager
Weakness CWE-79 · XSS
Published August 11, 2023
Last update October 3, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

Key dates

02Disclosure timeline

August 11, 2023 CVE published
October 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-1961 SourceCodester Online Computer and Laptop Store cross site scripting CVE-2026-23752 GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter CVE-2023-3093 YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email CVE-2025-24637 WordPress Beacon Lead Magnets and Lead Capture Plugin <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-12117 Stackable – Page Builder Gutenberg Blocks <= 3.13.11 - Authenticated (Contributor+) Stored Cross-Site Scripting