forma vulnerabilities

CVEs per yearBy the year they were published

1. 20226
2. 20262

Newest CVEs

• CVE-2026-96777

  Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection

  Forma · LMS

  Medium5.3
• CVE-2020-36998

  forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting

  forma · E-Learning Suite

  Medium5.1
• CVE-2022-41679

  Cross-site scripting in Forma LMS version

  Forma · Forma LMS

  Medium4.7
• CVE-2022-42924

  SQL injection in Forma LMS

  Forma · Forma LMS

  High7.6
• CVE-2022-41681

  File Upload vulnerability in Forma LMS

  Forma · Forma LMS

  Critical9.9
• CVE-2022-41680

  SQL Injection in Forma LMS

  Forma · Forma LMS

  High7.6
• CVE-2022-42925

  Unrestricted Upload of File with Dangerous Type in Forma LMS

  Forma · Forma LMS

  Critical9.9
• CVE-2022-42923

  SQL injection in Forma LMS

  Forma · Forma LMS

  High8.3