Cross Site Scripting Vulnerability in Creativeitem Academy LMS
CVE-2024-38959

Currently unrated

Key Information:

Vendor

Creativeitem

Status
Academy LMS
Vendor
CVE Published:
9 July 2024

What is CVE-2024-38959?

A Cross Site Scripting vulnerability in Creativeitem's Academy LMS version 6.8.1 enables remote attackers to inject arbitrary scripts through the 'string' parameter. This flaw can lead to the execution of malicious code in the context of the user's browser, allowing attackers to access sensitive data or perform actions on behalf of the user without consent.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://medium.com/%40geetmadan22/reflected-cross-site-sc...

Timeline

  • Vulnerability published

JSON
.