CVE-2023-4119

🗓️ 03 Aug 2023 08:31:03Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

Vulnerability in Academy LMS 6.0 allows remote cross site scripting via /academy/home/courses

Reporter	Title	Published	Views	Family All 17
0day.today	Academy LMS 6.0 - Reflected XSS Vulnerability	4 Aug 202300:00	–	zdt
ATTACKERKB	CVE-2025-71179	3 Feb 202600:00	–	attackerkb
Circl	CVE-2023-4119	3 Aug 202312:40	–	circl
CNNVD	Creativeitem Academy-LMS Cross-Site Scripting Vulnerability	3 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-4119 Academy LMS courses cross site scripting	3 Aug 202308:31	–	cvelist
Exploit DB	Academy LMS 6.0 - Reflected XSS	4 Aug 202300:00	–	exploitdb
EUVD	EUVD-2023-54005	3 Oct 202520:07	–	euvd
EUVD	EUVD-2025-206696	3 Feb 202600:00	–	euvd
NVD	CVE-2023-4119	3 Aug 202309:15	–	nvd
OSV	CVE-2023-4119	3 Aug 202309:15	–	osv

NVD

Vulners

Vulnrichment

Node

creativeitem academy_lmsMatch6.0

[
  {
    "vendor": "Academy",
    "product": "LMS",
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
packetstormsecurity	www.packetstormsecurity.com/files/173941/Academy-LMS-6.0-Cross-Site-Scripting.html

Parameter	Position	Path	Description	CWE
query	query param	/academy/home/courses	Reflected XSS via GET parameter 'query' on /academy/home/courses	CWE-79
sort_by	query param	/academy/home/courses	Reflected XSS via GET parameter 'sort_by' on /academy/home/courses	CWE-79

21 Nov 2024 08:34Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.3 - 6.1

CVSS 25

CVSS 34.3

EPSS0.02607

SSVC

CWE-79