Assli

**Name of the Vulnerable Software and Affected Versions** S-CMS version 5.0 Build 20220328 **Description** A vulnerability was found in the Contact Information Page component, where the manipulation of the `Make a Call` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For S-CMS version 5.0 Build 20220328, as a temporary workaround, consider restricting access to the Contact Information Page until a patch is available. Avoid using the `Make a Call` argument in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.