Description
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section.
Remediation
References
Related Vulnerabilities
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-1149)
WordPress Plugin Anti-Splog Cross-Site Scripting (2.1.7)
WordPress Plugin RSS Includes Pages Unspecified Vulnerability (3.1)
PHP Other Vulnerability (CVE-2007-1717)
Oracle Database Server CVE-2009-1985 Vulnerability (CVE-2009-1985)