VULNERABILITY INTELLIGENCE

CVE-2025-56746

CVSS score2.2 LOW
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-10-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-384

Primary references