CVE-2025-67298高 8.1An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
CVE-2025-65670中 4.3An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating…
CVE-2025-65676中 5.4Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft…
CVE-2025-65675中 5.4Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft…
CVE-2025-65669緊急 9.1An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization o…