Muhammad_Ammar

**Name of the Vulnerable Software and Affected Versions** CodeCanyon Rocket LMS versions prior to 2.3 **Description** An issue exists in the Student Profile Image Upload component where a remote manipulation can lead to cross site scripting (XSS), a technique used to inject malicious scripts into web pages viewed by other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/update category.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.