What is GHSA-2xp8-xg4h-rrr9?

GHSA-2xp8-xg4h-rrr9 is a security advisory published by GitHub Security Advisories with Medium severity. A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for...

Which CVE IDs does GHSA-2xp8-xg4h-rrr9 cover?

GHSA-2xp8-xg4h-rrr9 covers the following CVE IDs: CVE-2025-63842. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2xp8-xg4h-rrr9?

GHSA-2xp8-xg4h-rrr9 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-2xp8-xg4h-rrr9MediumCVSS 5.4

A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for...

Vendor

GitHub Security Advisories

Published

September 14, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2025-63842 →

📋 Description

A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-63842
https://github.com/ciernyvlk/CVE/blob/main/CVE-2025-63842.md
https://github.com/advisories/GHSA-2xp8-xg4h-rrr9