Netbox · Netbox · CVE-2023-37625
**Name of the Vulnerable Software and Affected Versions**
Netbox version 3.4.7
**Description**
A stored cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Link templates. This enables attackers to potentially manipulate the web application's behavior or steal user data.
**Recommendations**
For Netbox version 3.4.7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.