CVE-2025-46102
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A Cross Site Scripting (XSS) vulnerability in Beakon Learning Management System (SCORM) version V.5.4.3 allows a remote attacker to inject malicious script via the URL parameter. This flaw can be exploited to steal sensitive information.
Risk Assessment
The organization is at risk of sensitive data leakage, including user sessions, tokens, or other information transmitted in HTTP requests.
Recommendation
Immediately update Beakon Learning Management System to the latest patched version. Until then, validate and sanitize all URL parameters.
Original NVD description (English source)
Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter