Academy Lms

Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows attackers to forge valid JWT tokens, leading to authentication bypass and unauthorized access to any user account.

Published: 2025-10-15T00:00:00.000Z
Updated: 2025-10-15T17:37:38.852Z

Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts.

Published: 2025-10-15T00:00:00.000Z
Updated: 2025-10-15T17:51:37.809Z

Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management.

Published: 2025-10-14T00:00:00.000Z
Updated: 2025-10-14T15:57:08.378Z

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.

Published: 2025-10-15T00:00:00.000Z
Updated: 2025-10-15T15:36:11.922Z

Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. Attackers can inject malicious scripts through the profile avatar upload feature by modifying file extensions and embedding executable JavaScript code.

Published: 2025-12-15T20:28:17.234Z
Updated: 2026-04-07T14:07:02.883Z

A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /home/courses. The manipulation of the argument sort_by leads to cross site scripting. The attack may be launched remotely. VDB-234422 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2023-07-19T01:31:03.400Z
Updated: 2024-08-02T07:01:57.592Z

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.

Published: 2023-02-03T00:00:00.000Z
Updated: 2024-08-03T14:47:28.559Z

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.

Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T15:38:43.991Z

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page.

Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T15:40:02.925Z