Description
Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2024-20995 Vulnerability (CVE-2024-20995)
CakePHP Improper Input Validation Vulnerability (CVE-2010-4335)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-9933)
Moodle Improper Input Validation Vulnerability (CVE-2009-1171)
Django Improper Input Validation Vulnerability (CVE-2011-4139)