CVE-2025-46101: Beakon Learning Management System Sharable Content Object Reference Model

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file

Affected products

• Beakon Learning Management System Sharable Content Object Reference Model: before 5.4.3 (fixed in 5.4.3)

Published 2025-06-23. Last modified 2026-06-17.