Threats tagged 'ghsa-9248-q3fg-hqmh'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.2	EPSS 0.5%	CVE-2025-7062A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Medium5.2EPSS 0.5%2026-09-09GCVE DatabaseCVE-2025-7062 A stored cross-site scripting (XSS) vulnerability exists in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. This vulnerability allows attackers to upload H5P content containing malicious JavaScript, which executes in the browsers of users viewing the content. The issue is categorized under CWE-20 and has a moderate severity rating. No patch or official fix information is currently available. EPSS 0.5%Report on CVE-2025-7062 Vulnerability CWE-20 #ghsa-9248-q3fg-hqmh	GCVE Database	2026-09-09

Page 1 of 1