CVE-2024-27612 is a remote code execution exploit that affects the Numbas editor before version 7.3. The vulnerability is described as an issue with how the editor handles editing themes and extensions.

Numbas is an open-source system for creating tests which run entirely in the browser. It has been developed by Newcastle University’s School of Mathematics, Statistics and Physics.