Description
Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to insufficient sanitization of the page parameter in the session/add_users_to_session.php endpoint. This issue has been patched in version 1.11.30.
Remediation
References
Related Vulnerabilities
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2017-3169)
PHP Out-of-bounds Read Vulnerability (CVE-2019-9023)
WordPress Plugin Form Lightbox Security Bypass (2.1)
Claroline Other Vulnerability (CVE-2005-1376)
WordPress Plugin ThemeHigh WooCommerce Wishlist and Comparison Cross-Site Request Forgery (1.0.4)