CVE-2026-96777
Forma LMS Multi-User-Selector AJAX Endpoint getData getDataTask sql injection
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/userselector/getData of the component Multi-User-Selector AJAX Endpoint. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-89 CWE-74 |
| Vendor | forma |
| Product | lms |
| Published | Sep 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for forma lms
Be the first to know when new medium vulnerabilities affecting forma lms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Forma / LMS
4.1.0 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 4.1.6 4.1.7 4.1.8 4.1.9 4.1.10 4.1.11 4.1.12 4.1.13 4.1.14 4.1.15 4.1.16 4.1.17 4.1.18 4.1.19 4.1.20 4.1.21 4.1.22 4.1.23 4.1.24 4.1.25 4.1.26 4.1.27 4.1.28 4.1.29 4.1.30 4.1.31 4.1.32 4.1.33 4.1.34 4.1.35 4.1.36 4.1.37 4.1.38 4.1.39 4.1.40 4.1.41 4.1.42 4.1.43
References
vuldb.com: https://vuldb.com/vuln/409034 vuldb.com: https://vuldb.com/vuln/409034/cti vuldb.com: https://vuldb.com/cve/CVE-2026-96777 vuldb.com: https://vuldb.com/submit/905111 github.com: https://github.com/lorenzobruno7/advisory_formalms_sql/tree/main github.com: https://github.com/lorenzobruno7/advisory_formalms/tree/main
Credits
🔍 Brunlorenz (VulDB User) VulDB CNA Team