header-logo
Suggest Exploit
vendor:
Academy-LMS
by:
Vinicius Alves
8.8
CVSS
HIGH
Stored XSS
79
CWE
Product Name: Academy-LMS
Affected Version From: 4.3
Affected Version To: 4.3
Patch Exists: N/A
Related CWE: N/A
CPE: a:academy-lms:academy-lms
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: Win10, Google Chrome
2020

Academy-LMS 4.3 – Stored XSS

This exploit allows an attacker to inject malicious code into the Academy-LMS 4.3 application. The attacker can gain access to the admin panel, access the courses page, open the course manager and SEO menu, paste the XSS payload tag and submit. When the course page is accessed on the frontend, the malicious code is triggered.

Mitigation:

Input validation should be used to prevent malicious code from being injected into the application.
Source

Exploit-DB raw data:

# Exploit Title: Academy-LMS 4.3 - Stored XSS
# Date: 19/12/2020
# Vendor page: https://academy-lms.com/
# Version: 4.3
# Tested on Win10 and Google Chrome
# Exploit Author: Vinicius Alves

# XSS Payload: </script><svg onload=alert();>

1) Access LMS and log in to admin panel
2) Access courses page
3) Open course manager and SEO menu
4) Paste the XSS Payload tag and Submit
5) Access the course page on frontend
6) Trigged!

Navigation

Suggest Exploit

Services By CQR