PT-2026-2413 · Unknown · Ametys Cms

Vulnerability-Lab · Published 2026-01-13 · Updated 2026-02-02 · CVE-2022-50937

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ametys CMS version 4.4.1

Description Ametys CMS version 4.4.1 has a persistent cross-site scripting issue in the link directory’s input fields for external links. An attacker can inject malicious script code into the link text and descriptions, leading to persistent attacks that can compromise user sessions and manipulate application modules. The issue allows for the execution of malicious scripts when users access the affected links.

Recommendations Update Ametys CMS to a version that addresses this issue. As a temporary workaround, sanitize all input data for external links in the link directory to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-50937

Affected Products

Ametys Cms

References · 9

• 🔥 https://vulnerability-lab.com/get_content.php?id=2275 · Exploit
• 🔥 https://exploit-db.com/exploits/50692 · Exploit
• https://osv.dev/vulnerability/CVE-2022-50937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50937 · Security Note
• https://twitter.com/CVEnew/status/2011383049469014194 · Twitter Post
• https://t.me/cveNotify/150597 · Telegram Post
• https://t.me/cveNotify/150411 · Telegram Post
• https://ametys.org/community/en/ametys-platform/ametys-portal/overview.html · Note
• https://vulncheck.com/advisories/ametys-cms-cross-site-scripting-xss · Note