CVE-2026-3007 — Stored Cross-Site Scripting (XSS) Vulnerability

CVE-2026-3007

Stored Cross-Site Scripting (XSS) Vulnerability PUBLISHED

Description (CNA)

Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has access to Koollab LMS’ courselet feature.

Affected (CNA)

Vendor / product	Versions
Three Learning / Koollab Learning Management System	affected 5.3.2.

CWE

No CWE identifiers supplied.

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-042/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.