CVE-2022-29380 PoC — Creativeitem Academy-LMS 跨站脚本漏洞

Source

https://github.com/OpenXP-Research/CVE-2022-29380

Associated Vulnerability

Title:Creativeitem Academy-LMS 跨站脚本漏洞 (CVE-2022-29380)
Description:Creativeitem Academy-LMS是Creativeitem公司的一个在线学习平台。 Academy-LMS v4.3 版本存在安全漏洞，该漏洞源于 SEO panel 中存在一个跨站脚本（XSS）问题。

Description

2022-29380

Readme

# CVE-2022-29380
CVE-2022-29380

```
Date: 25/05/2022
Author: OpenXP Team
Software: Academy LMS
Version: Academy LMS <= v4.3
Type: Cross-Site Scripting
OWASP TOP 10: A03:2021-Injection
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References: https://nvd.nist.gov/vuln/detail/CVE-2022-29380

```

File Snapshot


 [4.0K]  /data/pocs/1b5bb1bee7a234897e5f7b2fa3ca14fe93412f96
└── [ 348]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!