Veille CVE

Recherche « Rocketsoft Rocket LMS »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Rocketsoft Rocket LMS » ✕
  1. CVE-2021-47907 6.4 Moyenne

    Rocketsoft Rocket LMS

    Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code through the title parameter. Attackers can submit support tickets with embedded HTML/JavaScript payloads that execute in the browsers of other users viewing the message history, enabling session hijacking and phishing attacks.