Vulners
Lucene search
Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Rocket LMS 1.9 - Persistent Cross Site Scripting Vulnerability | 19 May 202400:00 | – | zdt |
 | Rocketsoft Rocket LMS 跨站脚本漏洞 | 17 May 202400:00 | – | cnnvd |
 | CVE-2024-34241 | 17 May 202415:17 | – | cve |
 | CVE-2024-34241 | 17 May 202415:17 | – | cvelist |
 | EUVD-2024-34707 | 3 Oct 202520:07 | – | euvd |
 | CVE-2024-34241 | 17 May 202416:15 | – | nvd |
 | CVE-2024-34241 | 17 May 202416:15 | – | osv |
 | Rocket LMS 1.9 Cross Site Scripting | 20 May 202400:00 | – | packetstorm |
 | PT-2024-25762 · Rocketsoft · Rocket Lms | 16 May 202400:00 | – | ptsecurity |
 | CVE-2024-34241 | 9 Jan 202609:36 | – | redhatcve |
10
# Title: Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
# Date: 04/16/2024
# Exploit Author: Sergio Medeiros
# Vendor Homepage: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735
# Software Link: https://lms.rocket-soft.org
# Version: 1.9
# Tested on Firefox and Chrome Browsers
# Patched Version: Patch Pending
# Category: Web Application
# CVE: CVE-2024-34241
# Exploit link: https://grumpz.net/cve-2024-34241-a-step-by-step-discovery-guide
# PoC:
In order to exploit this systemic stored XSS vulnerability, identify theareas in the web application which has a WYSIWIG editor used, for example, the create/edit course description section.
Input random text in the description section, and create the course while intercepting the request with BurpSuite or your preferred proxy of choice.
In the *description* parameter or the associated parameter that is handling the user input related to the WYSIWIG editor, input the following payload and then issue the request:
<details/open/ontoggle=prompt(origin)>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 May 2024 00:00Current
5.3Medium risk
Vulners AI Score5.3
CVSS 3.14.8
EPSS0.01054
SSVC