Description

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition.

Remediation

References

CVE-2023-37062

Related Vulnerabilities

WordPress Plugin WP Human Resource Management Security Bypass (2.2.14)

WordPress Plugin Daily Prayer Time SQL Injection (2022.02.28)

PrestaShop Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4545)

Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-38887)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5867)

Severity

Medium

Classification

CVE-2023-37062 CWE-707 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities