ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-36998”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36998
Published
2026-01-30
CVSS:
5.1
ShadowTrackr CVSS:
1.2
Summary:
Forma.lms The E-Learning Suite 2.3.0.2 contains a persistent cross-site scripting vulnerability in multiple course and profile parameters. Attackers can inject malicious scripts in course code, name, description fields, and email parameter to execute arbitrary JavaScript without proper input sanitization.