Forma Forma Lms
6 CVEs affecting Forma Forma Lms. Latest disclosed: 2022-10-31. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42925 | Critical | 9.9 | 2022-10-31 | There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in… |
CVE-2022-41681 | Critical | 9.9 | 2022-10-31 | There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in… |
CVE-2022-42923 | High | 8.3 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-42924 | High | 7.6 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-41680 | High | 7.6 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-41679 | Medium | 4.7 | 2022-10-31 | Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the… |