CVE-2022-47131

Mô tả

Tham khảo

• blog.hackingforce.com.br/en/xss · Technical Description
• portswigger.net/web-security/csrf · Technical Description
• portswigger.net/web-security/csrf/xss-vs-csrf · Technical Description
• linkedin.com/in/xvinicius · Third Party Advisory
• xpsec.co/blog/academy-lms-5-10-add-page-csrf-xss · Exploit
• OpenXP-Research/CVE-2022-47131

Lỗ hổng khác của academy lms

• CVE-2025-71179TRUNG BÌNH 6.1Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs en…
• CVE-2023-53876TRUNG BÌNH 5.4Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site sc…
• CVE-2025-56749NGHIÊM TRỌNG 9.4Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows atta…
• CVE-2025-56748TRUNG BÌNH 6.4Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limi…
• CVE-2025-56746THẤP 2.2Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation …