cbcvebase.

Lamsfoundation Lams vulnerabilities

1 known vulnerability affecting lamsfoundation/lams.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2018-12090P3MEDIUMCVSS 6.1PoCfixed in 3.12018-06-11
CVE-2018-12090 [MEDIUM] CWE-79 CVE-2018-12090: There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remot There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.
nvd
Lamsfoundation Lams vulnerabilities | cvebase