漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile Settings
Vulnerability Description
Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting payloads. Attackers can inject malicious scripts through the profile avatar upload feature by modifying file extensions and embedding executable JavaScript code.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Kodezen Academy LMS 安全漏洞
Vulnerability Description
Kodezen Academy LMS是美国Kodezen公司的一个学习管理系统。 Kodezen Academy LMS 6.1版本存在安全漏洞，该漏洞源于存在文件上传漏洞，可能导致上传恶意SVG文件并执行存储型跨站脚本。
CVSS Information
N/A
Vulnerability Type
N/A