CVE-2025-7062

Publié : 9 septembre 2026

Modifié : 9 septembre 2026

Description détaillée

A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This code is then executed in the browsers of other users who view the affected H5P content.

Références et Patchs

https://github.com/Lumieducation/H5P-Nodejs-library/releases/tag/v10.0.4 https://www.schutzwerk.com/en/blog/schutzwerk-sa-2024-007/

Dernières Vulnérabilités

CVE-2026-19733

Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. This issue affects Library Information and Document Automation Program: before v22.2.

VOIR DÉTAILS

CVE-2026-11838

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2.

VOIR DÉTAILS

CVE-2025-3271

Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS

VOIR DÉTAILS