CVE-2023-4119
MediumCVSS 4.3Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
A vulnerability has been found in Academy LMS 6.0 that leads to cross site scripting attacks. The issue affects unknown code in the file /academy/home/courses, and manipulation of the argument query/sort_by allows for remote attacks.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious code, potentially leading to user data theft or session hijacking. Organizations should be aware of the security risks associated with their applications.
Recommendation
It is recommended to update to the latest version of Academy LMS and to monitor and secure the application against XSS attacks. Additional protective measures, such as input data filtering, should also be considered.
Other vulnerabilities in Academy LMS 6.0
See all- CVE-2026-9341Medium
The Academy LMS plugin for WordPress up to version 3.8.0 is vulnerable to Insecure Direct Object Reference (IDOR) in the 'save_lesson_note', 'get_lesson_note', and 'complete_lesson_video' AJAX handlers due to missing validation on a user-controlled key. This allows authenticated attackers with Subscriber-level access or higher to read, overwrite, or delete private lesson notes of any other user (including administrators) and falsify lesson-completion progress for arbitrary users.
- CVE-2026-12376Medium
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above (enrolled in any single course) to read every user's quiz attempts across the whole site, including personal data such as IP addresses, names, registration dates and quiz results.
- CVE-2026-5348Medium
The Academy LMS WordPress plugin up to version 3.8.1 is vulnerable to Insecure Direct Object Reference (IDOR) in the '/topics' REST API endpoint. Lack of permission checks allows unauthenticated attackers to access detailed course data, including private, draft, scheduled, or password-protected courses.
Original NVD description (English source)
A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code of the file /academy/home/courses. The manipulation of the argument query/sort_by leads to cross site scripting. The attack can be initiated remotely. VDB-235966 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS