CVE-2022-38553

MEDIO 6.1CVE-2022-38553 · Published 26/09/2022 · updated 09/07/2026

En resumen

CVE-2022-38553 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a academy learning management system (creativeitem).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.0%, mayor que el 87.3% de las vulnerabilidades.
Solución: actualizar a 5.9.1 o posterior.

Package	Affected versions	Patched versions
academy learning management system creativeitem	`< 5.9.1`	`5.9.1`

Description

Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter.

References

codecanyon.net/item/academy-course-based-learning-management-system/22703468 · Product
demo.creativeitem.com/academy/home · Product
demo.creativeitem.com/academy/home/search
4websecurity/CVE-2022-38553 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free