Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-3007 EUVD-2026-25170GHSA-p88x-88cf-mv94

Stored Cross-Site Scripting (XSS) Vulnerability

Published Apr 23, 2026 · Updated May 10, 2026 · Assigned by CSA

Description

Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has access to Koollab LMS’ courselet feature.

Affected products

VendorProductAffectedFixed
Three Learning Koollab Learning Management System 5.3.2. —

References