Skip to content
OpenAdvisories

Product · Creativeitem

Academy LMS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2023-53876

    Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings

    Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. Attackers can inject malicious scripts through the profile avatar upload feature by modifying file ex…

    Creativeitem Academy LMS