CVE-2025-56746

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where…

Low · published October 15, 2025

CVSS v3.1
2.2
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.

The record
Technical detail
CVSS v3.1
2.2 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.3th percentile
Published
2025-10-15T00:00Z
EPSS history
Timeline
  • 15 OCT 00:00Z
    Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where…
    cvelistv5