CVE-2022-47132

CVE-2022-47132 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Academy LMS versions prior to 5.10, which allows an attacker to arbitrarily add new Administrator users. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, organizations using affected versions should prioritize patching to mitigate the risk of unauthorized administrator account creation.