lms vulnerabilities
CVEs whose affected-version data names the lms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-112031Low· 3.5PoCChamilo LMS Ticket TicketManager.php addProject cross site scripting
A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the…
CVE-2026-78532High· 7.1Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
CVE-2026-96777Medium· 6.3PoCA vulnerability was determined in Forma LMS up to 4.1.43
A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endp…
CVE-2026-54343High· 8.7Frappe Learning Management System (LMS) is a learning system that helps users structure their content
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/page_renderers.py. The …