Lucene search

PRIOn knowledge basePRION:CVE-2023-31802

HistoryMay 09, 2023 - 4:15 p.m.

Cross site scripting

2023-05-0916:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

chamilo lms

vulnerability

arbitrary code execution

skype

linkedin_url

nvd

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skype and linedin_url parameters.

CPENameOperatorVersion
chamilo_lmseq1.11.18

CPE	Name	Operator	Version
	chamilo_lms	eq	1.11.18

References

chamilo.com

support.chamilo.org/projects/chamilo-18/wiki/Security_issues