Medium severity6.1NVD Advisory· Published Jun 28, 2024· Updated Jun 17, 2026
CVE-2024-3800
CVE-2024-3800
Description
Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 2 more
- (no CPE)
- (no CPE)range: 0
- cpe:2.3:a:conceptintermedia:s\@m_cms:*:*:*:*:*:*:*:*range: <=3.3
Patches
Vulnerability mechanics
References
2- cert.pl/en/posts/2024/06/CVE-2024-3800nvdThird Party Advisory
- cert.pl/posts/2024/06/CVE-2024-3800nvdThird Party Advisory
News mentions
0No linked articles in our index yet.