Lucene search
HistoryMay 17, 2024 - 4:15 p.m.
CVE-2024-34241
cross-site scripting
rocketsoft
administrator
javascript payload
course notifications
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
5.4
Confidence
High
A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.
Related
exploitdb
exploitdb
Rocket LMS 1.9 - Persistent Cross Site Scripting (XSS)
2024-05-19 00:00:00
vulnrichment
vulnrichment
CVE-2024-34241
1976-01-01 00:00:00
cve
cve
CVE-2024-34241
2024-05-17 16:15:08
zdt
zdt
Rocket LMS 1.9 - Persistent Cross Site Scripting Vulnerability
2024-05-19 00:00:00
packetstorm
packetstorm
Rocket LMS 1.9 Cross Site Scripting
2024-05-20 00:00:00
cvelist
cvelist
CVE-2024-34241
1976-01-01 00:00:00
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
5.4
Confidence
High
Related for NVD:CVE-2024-34241