CVE-2025-65676

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p15

Published

Nov 26, 2025 (Nov 26, 2025)

Modified

Jul 5, 2026

Description

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.

Vendors: classroomio
Products: classroomio
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.