Medium severity4.8NVD Advisory· Published May 17, 2024· Updated Jun 17, 2026
CVE-2024-34241
CVE-2024-34241
Description
A cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator to store a JavaScript payload using the admin web interface when creating new courses and new course notifications.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:rocketsoft:rocket_lms:1.9:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rocketsoft:rocket_lms:1.9:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <1.9
Patches
Vulnerability mechanics
References
1- grumpz.net/cve-2024-34241-a-step-by-step-discovery-guidenvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.