Stored Cross-Site Scripting Vulnerability in H5P Module by Lumi Education UG

CVE-2025-7062

What is CVE-2025-7062?

A stored cross-site scripting vulnerability exists in the H5P module's library, allowing users to upload H5P content containing harmful JavaScript. When other users view this content, the malicious code is executed in their browsers, potentially compromising sensitive information and overall web application security. It is critical for users of the affected versions to update their systems to mitigate possible exploitation.

References