SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-27 04:12 UTC
  • Importiert: 2026-09-27 04:21 UTC
  • Quelle-ID: full_disc
  • uid_hash: 905de952e97b3c9ce95392531f2c2b45e08899345d42b51feb2ad5469d13e9a6
Full Disclosure

Inhalt

Posted by David Brown via Fulldisclosure on Sep 26 A stored cross-site scripting (XSS) vulnerability has been identified in

the H5P module

h5p-nodejs-library by Lumi Education UG in versions prior to 9.3.3. The

vulnerability

allows users to inject malicious JavaScript code in text fields. This

code is then

executed in victims' browsers when viewing the affected H5P content.

Metadata

========

  • Affected product: h5p-nodejs-library

  • Affected version: All versions prior to 9.3.3

  • Vendor:...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste