CVE-2023-4973: Academy LMS GET Parameter filter cross site scripting
First published: Fri Sep 15 2023(Updated: )
A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument searched_word/searched_tution_class_type[]/searched_price_type[]/searched_duration[] leads to cross site scripting. The attack can be launched remotely. The identifier VDB-239749 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Creativeitem Academy LMS | =6.2 | |
| Microsoft Windows Operating System | ||
| Creativeitem Academy LMS | =6.2 | |
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-4973.
What is the severity rating of CVE-2023-4973?
The severity rating of CVE-2023-4973 is medium (6.1).
What is the affected software in CVE-2023-4973?
The affected software in CVE-2023-4973 is Academy LMS 6.2 on Windows.
What is the CWE ID of CVE-2023-4973?
The CWE ID of CVE-2023-4973 is CWE-79.
How can I fix CVE-2023-4973?
To fix CVE-2023-4973, update Academy LMS to a version that is not affected by this vulnerability.
- agent/type
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/source
- agent/author
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/creativeitem
- canonical/creativeitem academy lms
- version/creativeitem academy lms/6.2
- vendor/microsoft
- canonical/microsoft windows operating system