Advisories · Technology

Forma LMS.

Every CVE that names Forma LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96777 CVE record

CVSS 5.3 Medium

Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection
- Forma LMS
- Other injection
- SQL injection
Not analysed yet 24 Sept 2026
CVE-2022-41679 CVE record

CVSS 4.7 Medium

Cross-site scripting in Forma LMS version
- Forma LMS
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2022
CVE-2022-42924 CVE record

CVSS 7.6 High

SQL injection in Forma LMS
- Forma LMS
- SQL injection
Not analysed yet 31 Oct 2022
CVE-2022-41681 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

File Upload vulnerability in Forma LMS
- Forma LMS
- Unrestricted file upload
Not analysed yet 31 Oct 2022
CVE-2022-41680 CVE record

CVSS 7.6 High

SQL Injection in Forma LMS
- Forma LMS
- SQL injection
Not analysed yet 31 Oct 2022
CVE-2022-42925 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Unrestricted Upload of File with Dangerous Type in Forma LMS
- Forma LMS
- Unrestricted file upload
Not analysed yet 31 Oct 2022
CVE-2022-42923 CVE record

CVSS 8.3 High

SQL injection in Forma LMS
- Forma LMS
- SQL injection
Not analysed yet 31 Oct 2022