CVE-2022-30349: 
C# vulnerability analysis and mitigation

siteserver SSCMS version 6.15.51 was found to be vulnerable to Cross-Site Scripting (XSS). The vulnerability was identified and assigned CVE-2022-30349, with the initial discovery being reported through GitHub issues (GitHub Issue).

The vulnerability exists in the modalRelatedFieldItemEdit.aspx endpoint with the path '/SiteServer/cms/modalRelatedFieldItemEdit.aspx'. The XSS vulnerability can be triggered through a POST request to this endpoint when specific parameters are manipulated, including siteId, RelatedFieldID, ParentID, Level, and ID. The attack vector requires authentication to exploit (GitHub Issue).

If successfully exploited, this Cross-Site Scripting vulnerability could allow attackers to inject malicious client-side scripts that would execute in the context of other users' browsers, potentially leading to theft of sensitive information, session hijacking, or other client-side attacks (GitHub Issue).

The vulnerability requires authentication to exploit, which somewhat limits its impact. A proof of concept exists demonstrating the vulnerability through a POST request to the affected endpoint (GitHub Issue).