Is CVE-2025-63842 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-63842?

CVE-2025-63842 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2025-63842

Description

A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field.