Unrated severityNVD Advisory· Published Jan 13, 2026· Updated Apr 7, 2026

Ametys CMS v4.4.1 - Cross Site Scripting (XSS)

CVE-2022-50937

Description

Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malicious script code in link text and descriptions to execute persistent attacks that compromise user sessions and manipulate application modules.

Affected products

Statamic/CMSllm-fuzzy
Range: =4.4.1
Ametys/Ametys CMSv5
Range: 4.4.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/50692mitreexploit
www.vulncheck.com/advisories/ametys-cms-cross-site-scripting-xssmitrethird-party-advisory
www.vulnerability-lab.com/get_content.phpmitrevendor-advisory
www.ametys.org/community/en/ametys-platform/ametys-portal/overview.htmlmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000