Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: RocketSoft Clear all filters
TI-2021-22521 CVE-2021-47907 · GHSA-p5cq-w88f-fj6p

Rocket LMS 1.1 Persistent Cross-Site Scripting via Support Tickets

Priority MEDIUM 56

Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-05-10 No fix listed CWE-79
TI-2024-22651 CVE-2024-34241 · GHSA-p52g-7jqp-23j6

A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an…

Priority LOW 23

A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00762 Published 2024-05-17 No fix listed CWE-79