CVE-2025-65676: XSS
Published Nov 26, 2025
·Updated
Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.
Affected Software
2 affected components
Classroomio Classroomio LMS
Classroomio classroomio=0.1.13
Event History
Nov 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65676?
CVE-2025-65676 is classified as a medium severity vulnerability.
2
How do I fix CVE-2025-65676?
To mitigate CVE-2025-65676, ensure that user input is properly sanitized before processing SVG cover images.
3
Who is affected by CVE-2025-65676?
CVE-2025-65676 affects users of Classroomio LMS version 0.1.13 and earlier.
4
What type of vulnerability is CVE-2025-65676?
CVE-2025-65676 is a stored Cross Site Scripting (XSS) vulnerability.
5
What can attackers do with CVE-2025-65676?
Attackers can exploit CVE-2025-65676 to execute arbitrary code by uploading crafted SVG cover images.