Classroomio
6 CVEs across 1 Classroomio products. Browse Classroomio vulnerabilities, severities, and proof-of-concept exploits.
Classroomio products with known CVEs
Classroomio CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-67298 | High | 8.1 | 2026-03-11 | An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile |
CVE-2025-65670 | Medium | 4.3 | 2025-11-26 | An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs… |
CVE-2025-65676 | Medium | 5.4 | 2025-11-26 | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images. |
CVE-2025-65675 | Medium | 5.4 | 2025-11-26 | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pict… |
CVE-2025-65672 | High | 7.5 | 2025-11-26 | Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings. |
CVE-2025-65669 | Critical | 9.1 | 2025-11-26 | An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication ch… |