MEDIUM Published November 26, 2025

CVE-2025-65676

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.

CVSS base score

5.4 (v3.1)

Severity

MEDIUM

Attack vector

Network

Weakness

CWE-79

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected products

classroomio classroomio

References

github.com Exploit, Third Party Advisory
github.com Product
github.com Exploit, Third Party Advisory

View full NVD advisory →

More classroomio vulnerabilities

Published the same day

← Back to CVE watch

CVE-2025-65676

Affected products

References

More classroomio vulnerabilities

Published the same day

Related reading