CVE-2025-46102

CVE-2025-46102 is a Cross-Site Scripting (XSS) vulnerability found in Beakon Software's Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version V.5.4.3. This flaw allows a remote attacker, with low privileges, to inject malicious scripts via the URL parameter, potentially leading to the disclosure of sensitive information. The vulnerability carries a CVSS score of 5.4 (Medium), indicating a network-based attack with low attack complexity, requiring user interaction, and resulting in low confidentiality and integrity impacts. While the EPSS score is very low, suggesting a low probability of exploitation, the FAUCET Risk Score is 42/100. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available for Metasploit, Nuclei, or ExploitDB. The CVE has received no community discussion or media coverage, aligning with typical patterns for the majority of reported vulnerabilities.