3 matches found
CVE-2022-3035
CVE-2022-3035 is a Stored XSS vulnerability affecting Snipe-IT prior to version 6.0.11. Multiple sources (NVD/NVD-listed entry, OSV, Veracode, CVE list) consistently describe Cross-site Scripting in the web app, originating from insufficient escaping/input handling in the UI when processing user ...
5.9CVSS4.9AI score0.00616EPSS
SaveExploits1References2Affected Software1
20