codecanyon rocket lms vulnerabilities

Latest codecanyon rocket lms CVEs

Newest publication first

1. CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

   Published 2026-09-29

   Medium·CVSS 5.1 EPSS 0.25%

   A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclos...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.