Description
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section.
Remediation
References
Related Vulnerabilities
Internet Information Services Improper Input Validation Vulnerability (CVE-2000-0258)
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-5419)
WordPress Plugin GistPress Cross-Site Scripting (3.0.1)
Apache httpd remote denial of service
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1862)