Browse CVEs

MEDIUM 6.1 CVE-2025-71179 Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs endpoint, a… Academy Lms No fix yet Fix from $1,6002026-02-03 MEDIUM 5.4 CVE-2023-53876 Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site scripting p… Academy Lms No fix yet Fix from $1,6002025-12-15 CRITICAL 9.4 CVE-2025-56749 Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows attackers to … Academy Lms after 6.14 Fix from $2,3002025-10-15 MEDIUM 6.4 CVE-2025-56748 Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, all… Academy Lms after 5.13 Fix from $1,6002025-10-15 MEDIUM 6.5 CVE-2025-56747 Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regular authen… Academy Lms after 5.13 Fix from $1,6002025-10-14 MEDIUM 5.4 CVE-2025-40990 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/inde… Ekushey Project Manager Crm Mitigation only Fix from $1,6002025-10-02 MEDIUM 5.4 CVE-2025-40991 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/inde… Ekushey Project Manager Crm Mitigation only Fix from $1,6002025-10-02 MEDIUM 5.4 CVE-2025-40989 Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/inde… Ekushey Project Manager Crm Mitigation only Fix from $1,6002025-10-02 MEDIUM 6.1 CVE-2024-38959 Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code … Academy Lms No fix yet Fix from $1,6002024-07-09 CRITICAL 9.8 CVE-2023-4974 A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academ… Academy Lms No fix yet Fix from $2,3002023-09-15 MEDIUM 6.1 CVE-2023-4973 A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functional… Academy Lms No fix yet Fix from $1,6002023-09-15 MEDIUM 6.1 CVE-2023-38964 Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability. Academy Lms No fix yet Fix from $1,6002023-08-04 MEDIUM 6.1 CVE-2023-4119 A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code of the file /academy/home/co… Academy Lms No fix yet Fix from $1,6002023-08-03 MEDIUM 6.1 CVE-2023-3755 A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this vulnerability is… Atlas Mitigation only Fix from $1,6002023-07-19 MEDIUM 6.1 CVE-2023-3756 A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is some unknown… Atlas Mitigation only Fix from $1,6002023-07-19 MEDIUM 6.1 CVE-2023-3754 A vulnerability, which was classified as problematic, was found in Creativeitem Ekushey Project Manager CRM 5.0. Affected is an unknown function of t… Ekushey Project Manager Mitigation only Fix from $1,6002023-07-19 MEDIUM 6.1 CVE-2023-3752 A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functionality of… Academy Lms Mitigation only Fix from $1,6002023-07-19 MEDIUM 6.1 CVE-2023-3753 A vulnerability classified as problematic has been found in Creativeitem Mastery LMS 1.2. This affects an unknown part of the file /browse. The manip… Mastery Lms Mitigation only Fix from $1,6002023-07-19 HIGH 8.8 CVE-2022-47132 A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users. Academy Lms 5.10+ Fix from $1,9502023-02-03 MEDIUM 6.1 CVE-2022-38553 Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parame… Academy Learning Management System 5.9.1+ Fix from $1,6002022-09-26 MEDIUM 6.5 CVE-2020-22273 Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings) Neoflex Video Subscription System Mitigation only Fix from $1,6002020-11-04 MEDIUM 5.4 CVE-2018-18417 In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as demonstrated by the name param… Ekushey Project Manager No fix yet Fix from $1,6002018-10-19