Description
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.0.x Remote File Inclusion (1.0.11 - 1.0.14)
WordPress Plugin HD Quiz Cross-Site Scripting (1.8.3)
WordPress Plugin Product Lister for Walmart Remote Code Execution (1.0.1)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113)
Oracle Database Server Improper Input Validation Vulnerability (CVE-2016-2381)