Low severity3.5NVD Advisory· Published Jun 30, 2023· Updated Jun 17, 2026
CVE-2023-3477
CVE-2023-3477
Description
A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-232756.
Affected products
2<=1.7+ 1 more
- (no CPE)range: <=1.7
- (no CPE)range: 1.7
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.