Approved changes feed: RSS · Atom

cpe:2.3:a:ametys:ametys:4.4.1:*:*:*:*:*:*:*

part: a version: 4.4.1 update: *

VendorAmetys (659b6fe0-7e37-510e-86d5-fa44bd998ea9)
ProductAmetys (eb598956-ea68-5d28-950d-b739fa29a591)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/ametys purl2cpe 2026-06-01 10:15:35.930490

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50937 vulnerable 2026-06-08 05:52:03.747478 Ametys CMS v4.4.1 - Cross Site Scripting (XSS)
MEDIUM (6.1)
Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malicious script code in link text and descriptions to execute persistent attacks that compromise user sessions and manipulate application modules.
Published: 2026-01-13T22:52:02.702Z
Updated: 2026-04-07T14:06:42.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.