Vulnerabilities

SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

September 22, 2026 1 min read 3 views
cybersecurity news newsapi
Posted by David Brown via Fulldisclosure on Sep 22A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P

Was this article helpful?

0 found this helpful

Related Articles

Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog

5 min read

Jev and other decision models can still be tricked with prompt injection

3 min read

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo