CVE-2018-12090

MEDIUM 6.1CVE-2018-12090 · Published 11/06/2018 · updated 17/06/2026

In short

CVE-2018-12090 is a MEDIUM (CVSS 6.1) vulnerability affecting lams (lamsfoundation).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
Fix: update to 3.1 or later.

Package	Affected versions	Patched versions
lams lamsfoundation	`< 3.1`	`3.1`

Description

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.

References

bugs.lamsfoundation.org/browse/LDEV-4600 · Exploit
exploit-db.com/exploits/45153 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free