CVE-2025-71179

🗓️ 03 Feb 2026 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 3 Views🌐 WEB

CVE-2025-71179: Creativeitem Academy LMS 7.0 has reflected XSS via blogs search and course bundles query.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2025-71179	3 Feb 202600:00	–	attackerkb
CNNVD	Creativeitem Academy LMS 安全漏洞	3 Feb 202600:00	–	cnnvd
Cvelist	CVE-2025-71179	3 Feb 202600:00	–	cvelist
EUVD	EUVD-2025-206696	3 Feb 202600:00	–	euvd
NVD	CVE-2025-71179	3 Feb 202618:16	–	nvd
OSV	CVE-2025-71179	3 Feb 202618:16	–	osv
Positive Technologies	PT-2026-5991	3 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-71179	4 Feb 202603:15	–	redhatcve
Vulnrichment	CVE-2025-71179	3 Feb 202600:00	–	vulnrichment

NVD

Node

Source	Link
codecanyon	www.codecanyon.net/item/academy-course-based-learning-management-system/22703468
creativeitem	www.creativeitem.com/products/academy-learning-management-system/
github	www.github.com/cod3rLucas/security-advisories/blob/main/CVE-2025-71179.md
exploit-db	www.exploit-db.com/exploits/51654

Parameter	Position	Path	Description	CWE
search	query param	/academy/blogs	Reflected XSS via the search parameter on the blogs endpoint.	CWE-79
string parameter	query param	/academy/course_bundles/search/query	Reflected XSS via a string parameter on the course bundles search/query endpoint.	CWE-79

10 Feb 2026 14:02Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.16.1

EPSS0.00053

SSVC