CVE-2025-56746
LOW
INFO
Priority: 0.00
BB Relevance:
9/100
Published: 2025-10-15
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Description
Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| creativeitem | academy_lms | < 5.13 |
References & Advisories (1)
Exploit
Mitigation
Third Party Advisory