A vulnerability was found in LMS Management System and classified as problematic. This impacts an unknown function of the file dbrecover.php of the component GET Parameter Handler. Such manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2026-40457. The attack may be launched remotely. There is no exploit available.
A patch should be applied to remediate this issue.
