CVE-2025-56746 — n/a / n/a

Description (CNA)

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://suryadina.com/academy-lms-session-fixation-1t8v5n3q6h/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.