https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T07:43:53.057316+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2018-12090 CVE-2018-12090 2026-11-10T07:43:53.070800+00:00

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.