| Package | Affected versions | Patched versions |
|---|---|---|
| academy lms | < 5.10 | 5.10 |
A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free