Skip to content
OpenAdvisories
Medium VA-26-212-01 1 CVE

SNOMED International Snowstorm reflected XSS

Published Aug 4, 2026 · Updated Aug 4, 2026

Vendor: SNOMED International Product: Snowstorm

Summary

SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. The function does not properly validate user input, allowing an attacker to inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link.

Vulnerabilities 1

  • Medium 5.0
    CVE-2026-66300

    SNOMED International Snowstorm reflected XSS

    SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2…

    SNOMED International Snowstorm

Revision history

  1. #1.0.0

    Initial publication