CVE-2025-24885 — pwn.college has a XSS on dojo pages
pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Missing access control on rendering custom (unprivileged) d…
Published: 2025-01-30 · CVSS: 7.6 · CVSS 3.1
pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Missing access control on rendering custom (unprivileged) dojo pages causes ability for users to create stored XSS.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7