CVE-2021-43687

chamilo-lms v1.11.14 is affected by a Cross Site Scripting XSS vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie...

PT-2021-23913

Name of the Vulnerable Software and Affected Versions: chamilo-lms version 1.11.14 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It occurs in the /plugin/jcapture/applet.php file if an attacker passes a message using hex2bin in the cookie. Recommendations: For...