CVE-2022-50937
HIGH SEVERITYCVSS Score & Metrics
Base Score
7.2 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Vulnerability Description
Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input fields for external links. Attackers can inject malicious script code in link text and descriptions to execute persistent attacks that compromise user sessions and manipulate application modules.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-79
Source
NVD
External References
- https://www.ametys.org/community/en/ametys-platform/ametys-portal/overview.html
- https://www.exploit-db.com/exploits/50692
- https://www.vulncheck.com/advisories/ametys-cms-cross-site-scripting-xss
- https://www.vulnerability-lab.com/get_content.php?id=2275
- https://www.exploit-db.com/exploits/50692
- https://www.vulnerability-lab.com/get_content.php?id=2275
Discussion (0)
Add Comment
No comments yet. Be the first!