MEDIUM
CVE-2025-63842
CVSS
5.4
Description
A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field.
Weakness (CWE)
CWE-79
Cross-site Scripting (XSS)
EPSS Score
0.21%
Probability of exploitation in next 30 days
11.1th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.