Academy Lms
1 CVEs
product
Monthly
Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/course_bundles/search/query endpoint. [CVSS 6.1 MEDIUM]
XSS
Academy Lms
NVD
GitHub
Exploit-DB
CVSS 3.1
6.1
EPSS
0.0%
CVE-2025-71179
EPSS 0%
CVSS 6.1
MEDIUM
POC
This Month
Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/course_bundles/search/query endpoint. [CVSS 6.1 MEDIUM]
XSS
Academy Lms
NVD
GitHub
Exploit-DB