Description
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section.
Remediation
References
Related Vulnerabilities
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3545)
PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-5682)
WordPress Plugin bodi0`s Easy cache Cross-Site Scripting (0.8)
Piwigo Improper Access Control Vulnerability (CVE-2016-10105)
WordPress Plugin Login with phone number Cross-Site Scripting (1.4.1)