Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-3007

Stored Cross-Site Scripting (XSS) Vulnerability

Description

Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has access to Koollab LMS’ courselet feature.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Three Learning Koollab Learning Management System

Default version status: unaffected

  • 5.3.2.affected

References