CVE-2026-102290

A vulnerability exists in CodeCanyon Rocket LMS up to version 2.2 . The issue resides in an unknown function within the Student Profile Image Upload component, where specific manipulations can lead to Cross-Site Scripting (XSS) . This attack can be executed remotely , and the exploit has been pub...