Cross Site Scripting Vulnerability in Chamilo LMS by Chamilo
CVE-2023-31805

4.8MEDIUM

Key Information:

Vendor

Chamilo

Status
Chamilo Lms
Vendor
CVE Published:
9 May 2023

What is CVE-2023-31805?

A Cross Site Scripting vulnerability exists in Chamilo LMS version 1.11.18 that could allow a local authenticated attacker to execute arbitrary code through manipulation of the homepage function. This vulnerability emphasizes the importance of secure coding practices and highlights potential risks associated with user input handling. Organizations utilizing this version of Chamilo LMS should evaluate their exposure and implement necessary security measures to safeguard against potential exploitation.

References

http://chamilo.com
https://support.chamilo.org/projects/chamilo-18/wiki/Secu...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2023-31805 : Cross Site Scripting Vulnerability in Chamilo LMS by Chamilo