Lucene search

K

[email protected]NVD:CVE-2024-3801

HistoryJun 28, 2024 - 1:15 p.m.

CVE-2024-3801

2024-06-2813:15:03

CWE-79

[email protected]

web.nvd.nist.gov

s@m cms

concept intermedia

reflected xss

get header parameters

vulnerable

vendor not investigated

0.0004 Low

EPSS

Percentile

9.1%

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.
Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.

References

cert.pl/en/posts/2024/06/CVE-2024-3800

cert.pl/posts/2024/06/CVE-2024-3800

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-3801