CVE-2025-46102

low-risk
Published 2025-07-17

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter

Do I need to act?

-
0.06% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.4/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Learning Management System Sharable Content Object Reference Model

Affected Vendors

Beakon

References (4)

Broken Link http://beakons.com
Not Applicable https://au.beakon.io/%7Bclient_dir%7D/courses/lms/scorm/loader.html?id=asdf&v=SC...
Product https://beakon.com.au
Third Party Advisory https://packetstorm.news/files/id/207103
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal