CVE-2024-34241: Rocketsoft Rocket Lms

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.

Affected products

• Rocketsoft Rocket Lms: version 1.9 only

Published 2024-05-17. Last modified 2026-06-17.