CVE-2022-38553 - Vulnerability Details - OpenCVE

Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Creativeitem	Academy Learning Management System

Configuration 1 [-]

cpe:2.3:a:creativeitem:academy_learning_management_system:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://academy.com
https://codecanyon.net/item/academy-course-based-learning-management-system/22703468
https://demo.creativeitem.com/academy/home/
https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E
https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-09-26T09:59:06

Updated: 2024-08-03T10:54:03.958Z

Reserved: 2022-08-22T00:00:00

Link: CVE-2022-38553

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-09-26T10:15:09.883

Modified: 2024-11-21T07:16:39.510

Link: CVE-2022-38553

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-09-26T09:59:06", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://academy.com"}, {"tags": ["x_refsource_MISC"], "url": "https://codecanyon.net/item/academy-course-based-learning-management-system/22703468"}, {"tags": ["x_refsource_MISC"], "url": "https://demo.creativeitem.com/academy/home/"}, {"tags": ["x_refsource_MISC"], "url": "https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-38553", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://academy.com", "refsource": "MISC", "url": "http://academy.com"}, {"name": "https://codecanyon.net/item/academy-course-based-learning-management-system/22703468", "refsource": "MISC", "url": "https://codecanyon.net/item/academy-course-based-learning-management-system/22703468"}, {"name": "https://demo.creativeitem.com/academy/home/", "refsource": "MISC", "url": "https://demo.creativeitem.com/academy/home/"}, {"name": "https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E", "refsource": "MISC", "url": "https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E"}, {"name": "https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md", "refsource": "MISC", "url": "https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:54:03.958Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://academy.com"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://codecanyon.net/item/academy-course-based-learning-management-system/22703468"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://demo.creativeitem.com/academy/home/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-38553", "datePublished": "2022-09-26T09:59:06", "dateReserved": "2022-08-22T00:00:00", "dateUpdated": "2024-08-03T10:54:03.958Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:creativeitem:academy_learning_management_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "A54B4E70-321B-47A8-9106-EE5A65D112D8", "versionEndExcluding": "5.9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter."}, {"lang": "es", "value": "Se ha detectado que Academy Learning Management System versiones anteriores a 5.9.1, contiene una vulnerabilidad de tipo cross-site scripting (XSS) reflejado por medio del par\u00e1metro Search."}], "id": "CVE-2022-38553", "lastModified": "2024-11-21T07:16:39.510", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-26T10:15:09.883", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "http://academy.com"}, {"source": "cve@mitre.org", "tags": ["Product", "Third Party Advisory"], "url": "https://codecanyon.net/item/academy-course-based-learning-management-system/22703468"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://demo.creativeitem.com/academy/home/"}, {"source": "cve@mitre.org", "url": "https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "http://academy.com"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Third Party Advisory"], "url": "https://codecanyon.net/item/academy-course-based-learning-management-system/22703468"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://demo.creativeitem.com/academy/home/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://demo.creativeitem.com/academy/home/search?query=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/4websecurity/CVE-2022-38553/blob/main/README.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}