CVE-2026-63228 — Unrestricted image upload vulnerability
An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registra…
Published: 2026-07-29 · CVSS: 2.6 · CVSS 3.1
An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7