All packages
LMS vulnerabilities
3 known CVE vulnerabilities in LMS, translated and rated.
- CVE-2023-1728Critical
The vulnerability in Fernus Informatics LMS allows unrestricted upload of files with dangerous types, potentially leading to OS Command Injection and Server Side Include (SSI) Injection.
- CVE-2026-78532High
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
- CVE-2026-27404High
An unauthenticated Cross Site Scripting (XSS) vulnerability exists in LMS version 9.7 and earlier. It allows a remote attacker to inject malicious scripts without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS