Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

CVE-2023-38964

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-38964

CVE-2023-38964 affects Creative Item Academy LMS 6.0. The connected Nuclei template indicates a cross-site scripting (XSS) flaw exploitable through the query parameter, enabling injection of scripts into pages viewed by users. Impact per the sources includes potential data theft, session hijackin...