CVE-2026-36748

CRITICAL CVSS: 9.0 Published: 2026-06-03 Modified: 2026-07-22

Description

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.

Affected Platforms

Unknown

Weakness Type

CWE-79

References