CVE Explorer

CVE-2026-40457

A Reflected Cross-Site Scripting (XSS) vulnerability exists in LMS (LAN Management System) before commit 9c5651b in the "dbrecover.php" and "netremap.php" modules where unsanitized GET parameters are directly embedded into HTML output. This allows an attacker to inject arbitrary JavaScript when an authenticated user clicks a crafted link, provided the required conditions (such as a network defined in the system) are met.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ca9c2a8ae2f6a9d3a8b6ac34cd3c3e08e925f5a4c9daad7ce113487d3cf207f9

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"LMS","repo":"https://github.com/chilek/lms","vendor":"LMS","versions":[{"lessThan":"9c5651b","status":"affected","version":"0","versionType":"git"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c758721d9e836f909cae2d4d57077ee8ef907ccf6a482e47611eb9ecb53aa10a · sha256:bac015099809b05d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":2.1,"baseSeverity":"LOW","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"N…

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:c758721d9e836f909cae2d4d57077ee8ef907ccf6a482e47611eb9ecb53aa10a · sha256:bac015099809b05d… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion

{"cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c758721d9e836f909cae2d4d57077ee8ef907ccf6a482e47611eb9ecb53aa10a · sha256:bac015099809b05d… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions

{"tags":["third-party-advisory"],"url":"https://cert.pl/posts/2026/06/CVE-2026-40455"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c758721d9e836f909cae2d4d57077ee8ef907ccf6a482e47611eb9ecb53aa10a · sha256:bac015099809b05d… · /containers/cna/references/1

{"tags":["patch"],"url":"https://github.com/chilek/lms/commit/9c5651b39bfd086cc34fc9a78ddaa8c0815af114"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c758721d9e836f909cae2d4d57077ee8ef907ccf6a482e47611eb9ecb53aa10a · sha256:bac015099809b05d… · /containers/cna/references/0

{"tags":["product"],"url":"https://lms.org.pl/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c758721d9e836f909cae2d4d57077ee8ef907ccf6a482e47611eb9ecb53aa10a · sha256:bac015099809b05d… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer