Filtered by vendor Rocketsoft Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-34241 1 Rocketsoft 1 Rocket Lms 2025-05-13 4.8 Medium
A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.
CVE-2023-3477 1 Rocketsoft 1 Rocket Lms 2024-11-21 3.5 Low
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-232756.