Aller au contenu
Se connecter
5.1 Moyenne

CVE-2023-53876 Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files…

Description

Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. Attackers can inject malicious scripts through the profile avatar upload feature by modifying file extensions and embedding executable JavaScript code.

Produits et versions touchés

Produit Versions touchées Corrigé en
Academy LMS 6.1 Pas de correctif indiqué

Autres CVE de Academy LMS

Les 2 CVE de Academy LMS →
CVE-2023-3752 A vulnerability was found in Creativeitem Academy LMS 5.15 3.5 Faible
Suivre cette CVE