Skip to content
Sign in
5.1 Medium

CVE-2023-53876 Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files…

Description

Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. Attackers can inject malicious scripts through the profile avatar upload feature by modifying file extensions and embedding executable JavaScript code.

Affected products and versions

Product Affected versions Fixed in
Academy LMS 6.1 No fix stated

Other CVEs of Academy LMS

The 2 CVEs of Academy LMS →
CVE-2023-3752 A vulnerability was found in Creativeitem Academy LMS 5.15 3.5 Low
Track this CVE