Description
A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by including a malicious payload in the 'content' parameter of 'group_topics.php'.
Remediation
References
Related Vulnerabilities
phpMyAdmin Other Vulnerability (CVE-2007-0204)
Oracle Application Server Other Vulnerability (CVE-2007-2123)
WordPress Plugin College publisher Import Arbitrary File Upload (0.1)
WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (5.2)
WordPress Plugin WP Featured Post with thumbnail 'src' Parameter Cross-Site Scripting (3.0)