CVE-2026-3007

Stored Cross-Site Scripting (XSS) Vulnerability

Medium · published April 23, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has access to Koollab LMS’ courselet feature.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Published
2026-04-23T02:54Z
EPSS history
Timeline
  • 23 APR 02:54Z
    Stored Cross-Site Scripting (XSS) Vulnerability
    cvelistv5