← Database

CVE-2026-66300

MEDIUM CVSS: 5.0 Published: 2026-08-04 Modified: 2026-08-04

Description

SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.

Affected Platforms

Unknown

Weakness Type

CWE-79

References