CVE-2022-29380 PoC — Creativeitem Academy-LMS 跨站脚本漏洞

Source

https://github.com/OpenXP-Research/CVE-2022-29380

Associated Vulnerability

Title: Creativeitem Academy-LMS 跨站脚本漏洞 (CVE-2022-29380)
Description:Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.

Description

2022-29380

Readme

# CVE-2022-29380
CVE-2022-29380

```
Date: 25/05/2022
Author: OpenXP Team
Software: Academy LMS
Version: Academy LMS <= v4.3
Type: Cross-Site Scripting
OWASP TOP 10: A03:2021-Injection
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References: https://nvd.nist.gov/vuln/detail/CVE-2022-29380

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →