CVE-2024-3800 XSS in S@M CMS

2024-06-2812:43:48

CWE-79

CERT-PL

github.com

s@m cms

reflected xss

vulnerable.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.
Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "S@M CMS",
    "vendor": "Concept Intermedia",
    "versions": [
      {
        "lessThanOrEqual": "3.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]