SiberianCMS Cross-Site Scripting Vulnerability in HTTP GET Request Handler

A cross-site scripting vulnerability has been identified in SiberianCMS version 4.20.6. The issue arises in an unknown functionality of the file '/app/sae/design/desktop/flat', within the HTTP GET request handler component. This vulnerability can be exploited remotely, and has been disclosed publicly. The vendor was contacted prior to this disclosure but did not respond.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.