Security Advisory
CVE-2018-12090
6.1
MEDIUM
Vulnerability Description
There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.
Published Date
June 11, 2018
Official Source
NIST NVD Advisory