Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-29380 PoC — Creativeitem Academy-LMS 跨站脚本漏洞

Source
https://github.com/OpenXP-Research/CVE-2022-29380
Associated Vulnerability
Title:Creativeitem Academy-LMS 跨站脚本漏洞 (CVE-2022-29380)
Description:Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.
Description
2022-29380
Readme
# CVE-2022-29380
CVE-2022-29380

```
Date: 25/05/2022
Author: OpenXP Team
Software: Academy LMS
Version: Academy LMS <= v4.3
Type: Cross-Site Scripting
OWASP TOP 10: A03:2021-Injection
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References: https://nvd.nist.gov/vuln/detail/CVE-2022-29380

```
File Snapshot

 [4.0K]  /data/pocs/1b5bb1bee7a234897e5f7b2fa3ca14fe93412f96
└── [ 348]  README.md

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →