CVE-2023-4973: Academy LMS GET Parameter filter cross site scripting
A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument searchedword/searchedtutionclasstype[]/searchedpricetype[]/searchedduration[] leads to cross site scripting. The attack can be launched remotely. The identifier VDB-239749 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-4973.
What is the severity rating of CVE-2023-4973?
The severity rating of CVE-2023-4973 is medium (6.1).
What is the affected software in CVE-2023-4973?
The affected software in CVE-2023-4973 is Academy LMS 6.2 on Windows.
What is the CWE ID of CVE-2023-4973?
The CWE ID of CVE-2023-4973 is CWE-79.
How can I fix CVE-2023-4973?
To fix CVE-2023-4973, update Academy LMS to a version that is not affected by this vulnerability.