CVE-2022-38553: XSS
Published Sep 26, 2022
·Updated
Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter.
Affected Software
1 affected component
Creativeitem Academy Learning Management System<5.9.1
Event History
Sep 26, 2022
CVE Published
via MITRE·09:59 AM
Data Sourced
via MITRE·09:59 AM
Description
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-38553?
CVE-2022-38553 is a reflected cross-site scripting (XSS) vulnerability in Academy Learning Management System before v5.9.1.
2
How severe is CVE-2022-38553?
CVE-2022-38553 has a severity score of 6.1 (Medium).
3
What software versions are affected by CVE-2022-38553?
Academy Learning Management System versions up to exclusive v5.9.1 are affected by CVE-2022-38553.
4
How can I fix CVE-2022-38553?
Update Academy Learning Management System to version 5.9.1 or later to fix CVE-2022-38553.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-38553?
The CWE ID for CVE-2022-38553 is CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).