PT-2026-34630 · Unknown · Koollab Lms

Justin Ng · Published 2026-04-23 · Updated 2026-05-10 · CVE-2026-3007

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Koollab LMS (affected versions not specified)

Description A stored cross-site scripting (XSS) issue exists within the courselet feature. This flaw allows an attacker to execute arbitrary JavaScript on any user account that has access to this feature.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-3007

Affected Products

Koollab Lms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-3007 · Security Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-042 · Note
• https://twitter.com/CVEnew/status/2047359891422007361 · Twitter Post
• https://t.me/cveNotify/162955 · Telegram Post