cve/2024/CVE-2024-34241.md
2024-05-25 21:48:12 +02:00

671 B

CVE-2024-34241

Description

A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.

POC

Reference

No PoCs from references.

Github