CVE-2021-43136

CRITICAL 9.8CVE-2021-43136 · Published 10/11/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
formalms formalms	`≤ 2.4.4`	No fix yet

Description

An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform.

References

packetstormsecurity.com/files/164930/FormaLMS-2.4.4-Authentication-Bypass.html · Exploit
blog.hacktivesecurity.com · Third Party Advisory
blog.hacktivesecurity.com/index.php/2021/10/05/cve-2021-43136-formalms-the-evil-default-value-that-leads-to-authentication-bypass · Exploit
formalms.org · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free