Plugin icon

Interactive Content – H5P

h5p

Vulnerabilities:

5

Last Updated:

July 30, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-06-26
Title
Interactive Content – H5P < 1.17.8 - Authenticated (Contributor+) Arbitrary File Deletion
Fixed in
Fixed in 1.17.8
CVSS
6.5 (medium)
Published
2026-06-18
Title
Interactive Content – H5P < 1.17.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.17.7
CVSS
6.1 (medium)
Published
2025-12-28
Title
H5P < 1.16.2 - Missing Authorization
Fixed in
Fixed in 1.16.2
CVSS
5.3 (medium)
Published
2025-10-13
Title
Interactive Content – H5P < 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.16.1
CVSS
6.4 (medium)
Published
2024-06-06
Title
H5P < 1.15.8 - Contributor+ Stored XSS
Fixed in
Fixed in 1.15.8
CVSS
5.9 (medium)