Description

A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by including a malicious payload in the 'content' parameter of 'group_topics.php'.

Remediation

References

CVE-2024-30618

Related Vulnerabilities

PHP Out-of-bounds Write Vulnerability (CVE-2019-6977)

Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-38002)

Jenkins CVE-2017-2602 Vulnerability (CVE-2017-2602)

WordPress Plugin Simple Gmail Login Stack Trace Information Disclosure (1.1.3)

Ruby Uncontrolled Resource Consumption Vulnerability (CVE-2018-8777)

Severity

Medium

Classification

CVE-2024-30618 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities