TI-2023-03247 CVE-2023-3477 · GHSA-7g2m-f8h7-7277
RocketSoft Rocket LMS Contact Form store cross site scripting
Priority LOW 27
A vulnerability was found in RocketSoft Rocket LMS 1.7.
No RocketSoft vulnerabilities are listed in CISA KEV.
2 records in Rocket Lms · all components
A vulnerability was found in RocketSoft Rocket LMS 1.7.
A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.