VYPR
Medium severity5.4NVD Advisory· Published Nov 26, 2025· Updated Jul 5, 2026

CVE-2025-65676

CVE-2025-65676

Description

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:a:classroomio:classroomio:0.1.13:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:classroomio:classroomio:0.1.13:*:*:*:*:*:*:*
    • (no CPE)range: <=0.1.13
  • Classroomio/LMSdescription

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.