Creativeitem Academy Lms vulnerabilities

CVE-2023-4974 [CRITICAL] CWE-89 CVE-2023-4974: A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument price_min/price_max leads to sql injection. The attack may be launched remotely. VDB-239750 is the identifier assign

CVE-2025-56749 [CRITICAL] CWE-798 CVE-2025-56749: Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token sign Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows attackers to forge valid JWT tokens, leading to authentication bypass and unauthorized access to any user account.

CVE-2023-4119 [MEDIUM] CWE-79 CVE-2023-4119: A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code of the file /academy/home/courses. The manipulation of the argument query/sort_by leads to cross site scripting. The attack can be initiated remotely. VDB-235966 is the identifier assigned to this vulnerability. NOTE: The vendor was c

CVE-2023-4973 [MEDIUM] CWE-79 CVE-2023-4973: A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affect A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument searched_word/searched_tution_class_type[]/searched_price_type[]/searched_duration[] leads to

CVE-2023-38964 [MEDIUM] CWE-79 CVE-2023-38964: Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability. Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVE-2025-56747 [MEDIUM] CWE-269 CVE-2025-56747: Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in t Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management.

CVE-2022-47132 [HIGH] CWE-352 CVE-2022-47132: A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.

CVE-2025-56748 [MEDIUM] CWE-640 CVE-2025-56748: Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Ba Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts.

CVE-2023-3752 [MEDIUM] CWE-79 CVE-2023-3752: A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affect A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /home/courses. The manipulation of the argument sort_by leads to cross site scripting. The attack may be launched remotely. VDB-234422 is the identifier assigned to this vulnerability. NOTE: The

CVE-2023-53876 [MEDIUM] CWE-434 CVE-2023-53876: Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malic Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. Attackers can inject malicious scripts through the profile avatar upload feature by modifying file extensions and embedding executable JavaScript code.

CVE-2025-71179 [MEDIUM] CVE-2025-71179: Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the s Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/course_bundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, which only fixed XSS in query and sort_by parameters to the /ac

CVE-2024-38959 [MEDIUM] CWE-79 CVE-2024-38959: Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 al Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter.

CVE-2022-29380 [MEDIUM] CWE-79 CVE-2022-29380: Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.

CVE-2022-47130 [MEDIUM] CWE-352 CVE-2022-47130: A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbit A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page.

CVE-2022-47131 [MEDIUM] CWE-79 CVE-2022-47131: A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily cr A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.

CVE-2025-56746 [LOW] CWE-384 CVE-2025-56746: Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful au Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.