Description

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends.

Remediation

References

CVE-2020-23126

Related Vulnerabilities

WordPress Plugin User Avatar Unspecified Vulnerability (1.4.6)

PHP Improper Input Validation Vulnerability (CVE-2007-4784)

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2032)

WordPress Plugin Toggle The Title Cross-Site Scripting (1.4)

WordPress Plugin Flat Preloader Cross-Site Request Forgery (1.5.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2020-23126