A vulnerability was found in RockRMS up to 16.13/17.7.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component User Profile Handler. This manipulation causes cross site scripting.
The identification of this vulnerability is CVE-2026-36748. It is possible to initiate the attack remotely. There is no exploit available.
