Cross-Site Scripting Vulnerability in Chamilo by Chamilo Foundation
CVE-2023-37063

4.8MEDIUM

Key Information:

Vendor

Chamilo

Status
Chamilo
Vendor
CVE Published:
7 July 2023

What is CVE-2023-37063?

A vulnerability in Chamilo LMS versions 1.11.x up to 1.11.20 allows users with administrative privileges to inject malicious scripts through the careers and promotions management section, potentially compromising web application integrity. This can result in unauthorized access or manipulation of user data, impacting both the application and its users.

References

https://github.com/chamilo/chamilo-lms/commit/546a18b0bd1...
https://support.chamilo.org/projects/1/wiki/Security_issu...

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.