Formalms vulnerabilities

Products

• Formalms 16
• Forma Lms 7

Newest

• formalms A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery... CVE-2026-26744 Public exploit 5.3 MediumFebruary 19, 2026
• formalms forma lms Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting CVE-2020-36960 5.1 MediumJanuary 26, 2026
• formalms Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run... CVE-2023-46693 6.1 MediumDecember 7, 2023
• forma lms, formalms forma lms, formalms +2 more Cross-site scripting in Forma LMS version CVE-2022-41679 4.7 MediumOctober 31, 2022
• forma lms, formalms forma lms, formalms +2 more SQL injection in Forma LMS CVE-2022-42924 7.6 HighOctober 31, 2022
• forma lms, formalms forma lms, formalms +2 more File Upload vulnerability in Forma LMS CVE-2022-41681 9.9 CriticalOctober 31, 2022
• forma lms, formalms forma lms, formalms +2 more SQL Injection in Forma LMS CVE-2022-41680 7.6 HighOctober 31, 2022
• forma lms, formalms forma lms, formalms +2 more Unrestricted Upload of File with Dangerous Type in Forma LMS CVE-2022-42925 9.9 CriticalOctober 31, 2022
• forma lms, formalms forma lms, formalms +2 more SQL injection in Forma LMS CVE-2022-42923 8.3 HighOctober 31, 2022
• formalms An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1... CVE-2022-27104 9.8 CriticalApril 19, 2022
• formalms An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the... CVE-2021-43136 Public exploit EPSS 15.7% 9.8 CriticalNovember 10, 2021
• formalms forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php... CVE-2020-26802 8.8 HighOctober 8, 2020
• formalms Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1.... CVE-2019-5110 7.4 HighDecember 3, 2019
• formalms Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1.... CVE-2019-5109 7.4 HighDecember 3, 2019
• formalms Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1.... CVE-2019-5112 7.4 HighDecember 3, 2019
• formalms Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1.... CVE-2019-5111 7.4 HighDecember 3, 2019
• formalms Multiple cross-site scripting (XSS) vulnerabilities in Forma Lms before 1.2.1 p01 allow remote... CVE-2014-5257 4.3 MediumNovember 6, 2014