Design/Logic Flaw

Chamilo 1.11.14 allows XSS via a main/calendar/agendalist.php?type= URI...

CVE-2021-26746

CVE-2021-26746 affects Chamilo 1.11.14, with a stored/reflected cross-site scripting vector accessible via main/calendar/agenda_list.php?type= URI. The vulnerability is documented across multiple feeds (NVD, CNVD, OSV, CVE list) as Chamilo XSS, with no explicit exploitation details, patches, or m...