All packages
LMS vulnerabilities
3 known CVE vulnerabilities in LMS, translated and rated.
- CVE-2026-78532High
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
- CVE-2026-27404High
An unauthenticated Cross Site Scripting (XSS) vulnerability exists in LMS version 9.7 and earlier. It allows a remote attacker to inject malicious scripts without authentication.
- CVE-2023-1728Critical
The vulnerability in Fernus Informatics LMS allows unrestricted upload of files with dangerous types, potentially leading to OS Command Injection and Server Side Include (SSI) Injection.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS