Log in Start free

Forma

Products

ProductCVEsExploitedLatest
Forma LMS6–Oct 31, 2022
E-Learning Suite1–Jan 30, 2026
LMS1–Sep 24, 2026

Exploited and recent CVEs

  • CVE-2026-96777 Medium 6.3 Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection 0.2%
  • CVE-2020-36998 Medium 6.4 forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting 0.3%
  • CVE-2022-41679 Medium 4.7 Cross-site scripting in Forma LMS version 0.6%
  • CVE-2022-42924 High 7.6 SQL injection in Forma LMS 0.5%
  • CVE-2022-41681 Critical 9.9 File Upload vulnerability in Forma LMS 1.0%
  • CVE-2022-41680 High 7.6 SQL Injection in Forma LMS 0.3%
  • CVE-2022-42925 Critical 9.9 Unrestricted Upload of File with Dangerous Type in Forma LMS 1.0%
  • CVE-2022-42923 High 8.3 SQL injection in Forma LMS 0.7%