Creativeitem Academy Lms vulnerabilities

• creativeitem academy lms Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via... CVE-2025-71179 6.1 MediumFebruary 3, 2026
• creativeitem academy lms Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings CVE-2023-53876 5.1 MediumDecember 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token... CVE-2025-56749 9.4 CriticalOctober 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on... CVE-2025-56748 6.4 MediumOctober 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful... CVE-2025-56746 2.2 LowOctober 15, 2025
• creativeitem academy lms Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability... CVE-2025-56747 6.5 MediumOctober 14, 2025
• creativeitem academy lms Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1... CVE-2024-38959 6.1 MediumJuly 9, 2024
• academy lms, creativeitem academy lms +1 more Academy LMS GET Parameter filter sql injection CVE-2023-4974 6.3 MediumSeptember 15, 2023
• academy lms, creativeitem academy lms +1 more Academy LMS GET Parameter filter cross site scripting CVE-2023-4973 3.5 LowSeptember 15, 2023
• creativeitem academy lms Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability. CVE-2023-38964 6.1 MediumAugust 4, 2023
• academy lms, creativeitem academy lms +1 more Academy LMS courses cross site scripting CVE-2023-4119 Public exploit 4.3 MediumAugust 3, 2023
• creativeitem academy lms Creativeitem Academy LMS courses cross site scripting CVE-2023-3752 3.5 LowJuly 19, 2023
• creativeitem academy lms A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily... CVE-2022-47132 Public exploit 8.8 HighFebruary 3, 2023
• creativeitem academy lms A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily... CVE-2022-47131 Public exploit 4.8 MediumFebruary 3, 2023
• creativeitem academy lms A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be... CVE-2022-47130 Public exploit 4.3 MediumFebruary 3, 2023
• creativeitem academy lms Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-29380 Public exploit 4.8 MediumMay 25, 2022