We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Assigner | CERT-PL |
Reserved | 2024-04-15 |
Published | 2024-06-28 |
Updated | 2024-10-30 |
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
Krzysztof Zając (CERT.PL)
https://cert.pl/en/posts/2024/06/CVE-2024-3800
https://cert.pl/posts/2024/06/CVE-2024-3800