Rivek619/CVE-2025-65676

Rivek619/CVE-2025-65676

Releases0
Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.

CVE History

CVEPublishedCVSS v3CVSS v2
5.4 MEDIUM

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.