CVE-2025-46102 is a Cross Site Scripting (CWE-79) vulnerability affecting Beakon Software Beakon Learning Management System SCORM version 5.4.3. The issue arises from improper sanitization of a URL parameter, which can be exploited by a remote attacker with low privileges and requiring user interaction to execute malicious scripts. The vulnerability impacts confidentiality and integrity but does not affect availability. The CVSS 3.1 base score is 5.4, reflecting medium severity with network attack vector, low attack complexity, and privileges required at the user level.

Successful exploitation can lead to disclosure of sensitive information and partial compromise of data integrity due to script injection. There is no impact on system availability. The attacker must have some user privileges and the victim must interact with a crafted URL to trigger the vulnerability.

No official patch or fix is currently available for this vulnerability. Users of Beakon Learning Management System SCORM version 5.4.3 should monitor vendor advisories for updates. In the meantime, limit exposure by restricting access to the affected component and educating users to avoid clicking untrusted links. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.