Vulnerabilities > Creativeitem > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-09-26 CVE-2022-38553 Cross-site Scripting vulnerability in Creativeitem Academy Learning Management System
Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter.
network
low complexity
creativeitem CWE-79
6.1
6.1
2020-11-04 CVE-2020-22273 Cross-Site Request Forgery (CSRF) vulnerability in Creativeitem Neoflex Video Subscription System 2.0
Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings) 		4.3
4.3