SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education
September 27, 2026
1 min read
4 views
cybersecurity
news
newsapi
Posted by David Brown via Fulldisclosure on Sep 26A stored cross-site scripting (XSS) vulnerability has been identified in
the H5P module
h5p-nodejs-library by Lumi Education UG in versions prior to 9.3.3. The
vulnerability
allows users to inject malicious
Was this article helpful?
0 found this helpful