https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-3816.htmlhttps://patchthecve.com/cve/CVE-2024-3816.htmlWed, 17 Jun 2026 07:45:10 +0000CRITICAL 9.8: Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.https://patchthecve.com/cve/CVE-2024-3801.htmlhttps://patchthecve.com/cve/CVE-2024-3801.htmlWed, 17 Jun 2026 07:45:08 +0000MEDIUM 6.1: Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.https://patchthecve.com/cve/CVE-2024-3800.htmlhttps://patchthecve.com/cve/CVE-2024-3800.htmlWed, 17 Jun 2026 07:45:08 +0000MEDIUM 6.1: Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.  Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears.