CVE Intelligence

Sanoma vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Sanoma products: 2 record(s), with severity, exploitation and fixes.

Clickedu 2

Exploited only (KEV) →

CVE-2026-5010 Medium · 5.1 CWE-79 Mar 27, 2026
Reflected Cross-Site Scripting (XSS) in Sanoma’s Clickedu
A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim’s browser by sending them a malicious URL using the endpoint “/user.php/”. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on the user’s behalf.
CVE-2025-41070 Medium · 4.8 CWE-79 Dec 1, 2025
Reflected Cross-site Scripting (XSS) in Sanoma's Clickedu
Reflected Cross-site Scripting (XSS) vulnerability in Sanoma's Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL in '/students/carpetes_varies.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.