Skip to content
OpenAdvisories

Product · Lumi Education UG

h5p-nodejs-library

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2025-7062

    Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

    A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScript. This c…

    Lumi Education UG h5p-nodejs-library