CVE-2018-12090

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via…

published June 11, 2018

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02164 · 82.1th percentile
Published
2018-06-11T10:00Z
EPSS history
Timeline
  • 11 JUN 10:00Z
    There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via…
    cvelistv5