← All advisories

Medium severity4.8NVD Advisory· Published Feb 3, 2023· Updated Jun 17, 2026

CVE-2022-47131

CVE-2022-47131

Description

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Academy LMS/Academy LMSdescription
OpenXP Research/CVE-2022-47131llm-create
Range: <5.10
Academy LMS/Academy LMSllm-fuzzy
Range: <5.10
Creativeitem/Academy Lms
cpe:2.3:a:creativeitem:academy_lms:*:*:*:*:*:*:*:*
Range: <5.10

Patches

Vulnerability mechanics

References

5

xpsec.co/blog/academy-lms-5-10-add-page-csrf-xssnvdExploitThird Party Advisory
blog.hackingforce.com.br/en/xssnvdTechnical DescriptionThird Party Advisory
portswigger.net/web-security/csrfnvdTechnical DescriptionThird Party Advisory
portswigger.net/web-security/csrf/xss-vs-csrfnvdTechnical DescriptionThird Party Advisory
www.linkedin.com/in/xvinicius/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.