PT-2026-2413 · Unknown · Ametys Cms

Vulnerability-Lab · Publicado 2026-01-13 · Atualizado 2026-02-02 · CVE-2022-50937

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ametys CMS version 4.4.1

Description Ametys CMS version 4.4.1 has a persistent cross-site scripting issue in the link directory’s input fields for external links. An attacker can inject malicious script code into the link text and descriptions, leading to persistent attacks that can compromise user sessions and manipulate application modules. The issue allows for the execution of malicious scripts when users access the affected links.

Recommendations Update Ametys CMS to a version that addresses this issue. As a temporary workaround, sanitize all input data for external links in the link directory to prevent the injection of malicious scripts.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-50937

Produtos afetados

Ametys Cms

Referências · 9

• 🔥 https://vulnerability-lab.com/get_content.php?id=2275 · Exploit
• 🔥 https://exploit-db.com/exploits/50692 · Exploit
• https://twitter.com/CVEnew/status/2011383049469014194 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2022-50937 · Aviso do Fabricante
• https://t.me/cveNotify/150597 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-50937 · Nota de Segurança
• https://t.me/cveNotify/150411 · Publicação no Telegram
• https://ametys.org/community/en/ametys-platform/ametys-portal/overview.html · Nota
• https://vulncheck.com/advisories/ametys-cms-cross-site-scripting-xss · Nota