Academy LMS 6.0 - Cross-Site Scripting

披露于 2023/08/04 · 更新于 2025/07/29

CVSS 评分6.1/ 10.0

EPSS 概率3.6%百分位 87.3%

漏洞描述

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability through `query` parameter.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 academy_learning_management_system 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2023-4973 Academy LMS 6.2 - Cross-Site Scripting academy_learning_management_system	中危	6.1	5.7%	PoCEXP	2023/09/15
CVE-2023-4974RCE Academy LMS 6.2 - SQL Injection academy_learning_management_system	严重	9.8	43.2%	PoCEXP	2023/09/14
CVE-2022-38553 Academy Learning Management System <5.9.1 - Cross-Site Scripting academy_learning_management_system	中危	6.1	33.4%	PoCEXP	2022/09/26