Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-56746

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.1%
CVSS Severity
CVSS v3 Score 2.2
Products affected by CVE-2025-56746


Contact Us

Shodan ® - All rights reserved