Approved changes feed: RSS · Atom

cpe:2.3:a:forma:e-learning_suite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorForma (cde82504-2d78-50fa-b535-d759b4ba255c)
ProductE Learning Suite (568cb8d7-8025-5e28-8207-c4050f87e7df)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36998 vulnerable 2026-06-08 05:25:49.981099 forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
MEDIUM (6.4)
Forma.lms The E-Learning Suite 2.3.0.2 contains a persistent cross-site scripting vulnerability in multiple course and profile parameters. Attackers can inject malicious scripts in course code, name, description fields, and email parameter to execute arbitrary JavaScript without proper input sanitization.
Published: 2026-01-30T16:16:37.882Z
Updated: 2026-05-14T02:06:46.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.