CVE-2025-46102

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-17 · updated 2026-07-05
Weakness: CWE-79

Description

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter

Affected products

Beakon Learning Management System Sharable Content Object Reference Model: before 5.4.3 — fixed in 5.4.3

How to fix

Upgrade to a fixed version: Beakon Learning Management System Sharable Content Object Reference Model 5.4.3. Check the vendor advisory for mitigations.

References

https://au.beakon.io/%7Bclient_dir%7D/courses/lms/scorm/loader.html?id=asdf&v=SCORM_12&preview=0&l=asdf&s=asdf&u=1&url=javascript:alert%28document.cookie
https://beakon.com.au
https://packetstorm.news/files/id/207103

Get alerted when CVE-2025-46102 or the next vulnerability affects your stack