CVE-2026-24584

Name of the Vulnerable Software and Affected Versions Themeum Tutor LMS BunnyNet Integration versions through 1.0.0

Description The Themeum Tutor LMS BunnyNet Integration software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting (XSS) condition. Specifically, this manifests as a DOM-Based XSS issue. The issue affects the software when processing user-supplied data, potentially allowing an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update Themeum Tutor LMS BunnyNet Integration to a version newer than 1.0.0.