Description

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file.

Remediation

References

CVE-2024-51142

Related Vulnerabilities

WordPress Plugin VikBooking Hotel Booking Engine & PMS Cross-Site Scripting (1.5.8)

PHP Other Vulnerability (CVE-2001-1385)

MySQL CVE-2014-4233 Vulnerability (CVE-2014-4233)

WordPress Plugin Social Review includes Backdoor [Only if downloaded via the vendor website] (1.0.8)

WordPress Plugin SMTP Mail SQL Injection (1.2.1)

Severity

Medium

Classification

CVE-2024-51142 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities