Dashboard / CVE-2025-65676

CVE-2025-65676

MEDIUM 1 PoC
MEDIUM Priority: 0.01 BB Relevance: 61/100
Published: 2025-11-26 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Network Low Complexity Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Required
S: Changed
C: Low
I: Low
A: None

Description

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
classroomio classroomio 0.1.13

References & Advisories (2)

https://github.com/Rivek619/CVE-2025-65676
Exploit Third Party Advisory

Proof of Concept (1)

—
https://github.com/Rivek619/CVE-2025-65676
nomi-sec

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ Low complexity
✓ PoC available (1)

CVSS Score

5.4 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS — Exploitation Probability

0.25%
Raw Score 0.002530
Percentile 16.9%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00253
2026-11-13
0.00253
2026-11-12
0.00253
2026-11-10
0.00253
2026-11-09
0.00253
2026-11-08
0.00253
2026-11-07
0.00253
2026-11-06
0.00253
2026-11-05
0.00253
2026-11-04
0.00253

Intelligence Sources

nvd ref →

External Links