Vulnerability Description
Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malicious script code in link text and descriptions to execute persistent attacks that compromise user sessions and manipulate application modules.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ametys | Ametys | 4.4.1 |
Related Weaknesses (CWE)
References
- https://www.ametys.org/community/en/ametys-platform/ametys-portal/overview.htmlProduct
- https://www.exploit-db.com/exploits/50692ExploitThird Party Advisory
- https://www.vulncheck.com/advisories/ametys-cms-cross-site-scripting-xssThird Party Advisory
- https://www.vulnerability-lab.com/get_content.php?id=2275ExploitThird Party Advisory
- https://www.exploit-db.com/exploits/50692ExploitThird Party Advisory
- https://www.vulnerability-lab.com/get_content.php?id=2275ExploitThird Party Advisory
FAQ
What is CVE-2022-50937?
CVE-2022-50937 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malicious script code in link text and descript...
How severe is CVE-2022-50937?
CVE-2022-50937 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-50937?
Check the references section above for vendor advisories and patch information. Affected products include: Ametys Ametys.