High severity8.8NVD Advisory· Published Feb 3, 2023· Updated Jun 17, 2026
CVE-2022-47132
CVE-2022-47132
Description
A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Academy LMS/Academy LMSdescription
- Range: <5.10
Patches
Vulnerability mechanics
References
3- portswigger.net/web-security/csrfnvdTechnical DescriptionThird Party Advisory
- www.linkedin.com/in/xvinicius/nvdThird Party Advisory
- xpsec.co/blog/academy-lms-5-10-add-admin-csrfnvdThird Party Advisory
News mentions
0No linked articles in our index yet.