Skip to content

CVE-2011-3689 Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject arbitrary web script or HTML via the BoxSerial parameter.

MediumCVSS 4.3 EPSS 1.3%
Published
Updated
Exploit status
No public exploit known

Description

Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject arbitrary web script or HTML via the BoxSerial parameter.

Affected products

ProductAffected versionsFixed in
wibu codemeter webadmin = 3.30 No fix listed
wibu codemeter webadmin = 4.30 No fix listed

References