CVE-2025-65675: XSS
Published Nov 26, 2025
·Updated
Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures.
Affected Software
2 affected components
Classroomio Classroomio LMS
Classroomio classroomio=0.1.13
Event History
Nov 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65675?
CVE-2025-65675 is classified as a medium severity stored cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2025-65675?
To remediate CVE-2025-65675, upgrade to the latest version of Classroomio LMS where the vulnerability is patched.
3
Who is affected by CVE-2025-65675?
Authenticated users of Classroomio LMS version 0.1.13 are potentially affected by CVE-2025-65675.
4
What type of vulnerability is CVE-2025-65675?
CVE-2025-65675 is a stored cross-site scripting (XSS) vulnerability allowing attackers to execute arbitrary code.
5
What can attackers achieve with CVE-2025-65675?
Attackers exploiting CVE-2025-65675 can execute arbitrary code through crafted SVG profile pictures.