Sites managed in S@M CMS (Concept Intermedia) might be...
Moderate severity
Unreviewed
Published
Jul 3, 2024
to the GitHub Advisory Database
•
Updated Jul 3, 2024
Description
Published by the National Vulnerability Database
Jun 28, 2024
Published to the GitHub Advisory Database
Jul 3, 2024
Last updated
Jul 3, 2024
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.
Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.