Security Vulnerability Found in Koollab LMS

The Cyber Security Agency of Singapore has issued an advisory concerning a critical security flaw, CVE-2026-3007, within Koollab LMS version 5.3.2. This vulnerability is identified as a stored cross-site scripting (XSS) issue, which could enable unauthorized JavaScript execution. Users of the affected learning management system are urged to update to version 5.4.0 immediately to mitigate potential risks.