CVE-2023-4973

Summary

CVE-2023-4973 is a newly identified vulnerability affecting Academy LMS 6.2 on Windows systems. This issue lies within the GET Parameter Handler component and an unknown functionality of the file /academy/tutor/filter. Manipulation of the searched_word, searched_tution_class_type[], searched_price_type[], and searched_duration[] arguments leads to cross-site scripting (XSS), enabling remote attacks. Despite early disclosure to the vendor, no response has been recorded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.