We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-3801

XSS in S@M CMS



AssignerCERT-PL
Reserved2024-04-15
Published2024-06-28
Updated2024-10-30

Description

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.

Product status

Default status
unknown

Any version
affected

Credits

Krzysztof Zając (CERT.PL) finder

References

https://cert.pl/en/posts/2024/06/CVE-2024-3800 third-party-advisory

https://cert.pl/posts/2024/06/CVE-2024-3800 third-party-advisory

cve.org CVE-2024-3801

nvd.nist.gov CVE-2024-3801

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.