CVE-2021-35415

A stored cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields...

CVE-2021-35415

creationtimestamp| type| source ---|---|--- 2021-12-04 00:38:11+00:00| seen| https://t.me/cibsecurity/33344...

CVE-2021-35415

Chamilo LMS is affected by a stored XSS vulnerability (CVE-2021-35415) where a crafted payload in the course “Title” and “Content” fields can execute arbitrary web scripts/HTML. The issue is described across multiple sources, tying it to unsanitized input in these fields. The available records do...