Read the docs

RocketSoft

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

RocketSoft records in CISA KEV

No RocketSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rocket Lms 2 records LOW

Records

3 records

TI-2021-22521 CVE-2021-47907 · GHSA-p5cq-w88f-fj6p

Rocket LMS 1.1 Persistent Cross-Site Scripting via Support Tickets

Priority MEDIUM 56

Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-05-10 No fix listed CWE-79
TI-2024-22651 CVE-2024-34241 · GHSA-p52g-7jqp-23j6

A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an…

Priority LOW 23

A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00762 Published 2024-05-17 No fix listed CWE-79
Open these records in search →