CVE-2022-50937

5.1 mediumEPSS 0.3%

Medium (5.1) in ametys ametys. EPSS 0.3% chance of exploitation in the next 30 days.

Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malicious script code in link text and descriptions to execute persistent attacks that compromise user sessions and manipulate application modules.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ametys:ametys

References

https://www.ametys.org/community/en/ametys-platform/ametys-portal/overview.html
https://www.exploit-db.com/exploits/50692
https://www.vulncheck.com/advisories/ametys-cms-cross-site-scripting-xss
https://www.vulnerability-lab.com/get_content.php?id=2275
https://www.exploit-db.com/exploits/50692

Check your stack JSON