Description
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
Critical · 9.0
CVE-2026-36748
EUVD-2026-34100GHSA-378r-5qcc-x537
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
Published Jun 3, 2026 · Updated Jul 5, 2026 · Assigned by mitre