TI-2018-08670 CVE-2018-12090 · GHSA-96hr-mrff-7vr6There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that…Priority LOW 31There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordCha…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02164 · Published 2018-06-11 · No fix listed CWE-79