Classroomio 6 CVEs across 1 Classroomio products. Browse Classroomio vulnerabilities, severities, and proof-of-concept exploits.
Classroomio products with known CVEs Classroomio CVEs — newest first CVE Severity Score Published Summary CVE-2025-67298High 8.12026-03-11 An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile CVE-2025-65670Medium 4.32025-11-26 An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs… CVE-2025-65676Medium 5.42025-11-26 Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images. CVE-2025-65675Medium 5.42025-11-26 Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pict… CVE-2025-65672High 7.52025-11-26 Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings. CVE-2025-65669Critical 9.12025-11-26 An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication ch…