Stored Cross-Site Scripting Vulnerability in Chamilo LMS
CVE-2021-35415

4.8MEDIUM

Key Information:

Vendor: Chamilo
Status: Chamilo Lms
Vendor: CVE Published:; 3 December 2021

What is CVE-2021-35415?

The Chamilo LMS contains a stored cross-site scripting (XSS) vulnerability that allows an attacker to inject and execute arbitrary web scripts or HTML through crafted input in the 'Title' and 'Content' fields of courses. This vulnerability can compromise user safety and the integrity of the platform, enabling malicious actors to manipulate course details and potentially gain unauthorized access to sensitive data.