Medium · 6.1 CVE-2024-38959 EUVD-2024-37685GHSA-7h39-qpq9-f9q4

Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbit…

Published Jul 9, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter.

References

https://medium.com/%40geetmadan22/reflected-cross-site-scripting-on-academy-lms-learning-management-system-product-4ab04ef51022