XSS in Lms

CVE-2026-40457

A Reflected Cross-Site Scripting (XSS) vulnerability exists in LMS (LAN Management System) before commit 9c5651b in the "dbrecover.php" and "netremap.php" modules where unsanitized GET parameters are directly embedded into HTML output. Thi…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.