CVE-2023-37066

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel...

CVE-2023-37061

Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section...

Chamilo 跨站脚本漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo version 1.11.x through versions...

CVE-2023-37061

Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section...

CVE-2023-37067

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section...

CVE-2023-37063

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section...

CVE-2023-37064

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section...

CVE-2023-37066

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel...

Chamilo 跨站脚本漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question and answer sessions. A cross-site scripting vulnerability exists in Chamilo versions 1.11.x through...

CVE-2023-37066: Improper Neutralization of Input During Web Page Generation

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel...

CVE-2023-37066

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel...

CVE-2023-37065

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section...

CVE-2023-37065

CVE-2023-37065 : Chamilo LMS 1.11.x up to 1.11.20 allows a user with an admin privilege account to inject cross-site scripting in the session category management section. Affected product: Chamilo LMS (1.11.x,

PT-2023-25775

Name of the Vulnerable Software and Affected Versions Chamilo versions 1.11.x up to 1.11.20 Description The issue allows users with admin privilege accounts to insert XSS in the course categories' definition. Recommendations For Chamilo versions 1.11.x up to 1.11.20, consider restricting access t...

PT-2023-25779 · Chamilo · Chamilo

Name of the Vulnerable Software and Affected Versions: Chamilo versions 1.11.x up to 1.11.20 Description: The issue allows users with admin privilege accounts to insert XSS in the skills wheel. This can be exploited by users with administrative privileges. Recommendations: For Chamilo versions...

PT-2023-25778

Name of the Vulnerable Software and Affected Versions Chamilo versions 1.11.x up to 1.11.20 Description The issue allows users with admin privilege accounts to insert XSS in the session category management section. Recommendations For Chamilo versions 1.11.x up to 1.11.20, consider restricting...

CVE-2023-37063

Chamilo LMS CVE-2023-37063 affects Chamilo 1.11.x up to 1.11.20. The vulnerability arises in the careers & promotions management section where an account with admin privileges can inject cross-site scripting (XSS). Impact is described as enabling script execution in that context; no specific expl...

CVE-2023-37066

CVE-2023-37066 affects Chamilo 1.11.x up to 1.11.20. The vulnerability allows users with an administrator privilege account to insert cross-site scripting (XSS) in the skills wheel. Public documentation notes this is a high-privilege issue with user interaction required, but explicit exploitation...

Chamilo 跨站脚本漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question and answer sessions. A cross-site scripting vulnerability exists in Chamilo versions 1.11.x through...

CVE-2023-37065: Improper Neutralization of Input During Web Page Generation

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section...