CVE-2023-31800

CVE-2023-31800 : Chamilo LMS version 1.11.18 is affected by a Cross Site Scripting (XSS) vulnerability in the forum title parameter that could allow a local attacker to execute arbitrary code. The provided connected documents confirm the affected product/version and the vulnerable parameter but d...

CVE-2023-31806

CVE-2023-31806 : Chamilo LMS v1.11.18 contains a Cross Site Scripting (XSS) vulnerability in the My Progress function that can allow a local attacker to execute arbitrary code through a crafted payload. The issue is described across multiple sources in the connected documents with the same underl...

CVE-2023-31801

CVE-2023-31801 concerns Chamilo LMS v1.11.18, where a Cross-Site Scripting (XSS) vulnerability exists in the skills wheel parameter. The authenticated or local attacker can trigger script execution, potentially compromising user sessions or executing arbitrary code, as described in multiple sourc...

PT-2023-23466 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo Lms version 1.11.18 Description: A Cross Site Scripting issue allows a local authenticated attacker to execute arbitrary code via the homepage function. Recommendations: For version 1.11.18, update to a newer version that contains a f...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

CVE-2023-31800

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter...

CVE-2023-31800

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter...

CVE-2023-31804

CVE-2023-31804 affects Chamilo Lms 1.11.18. The issue is a Cross Site Scripting vulnerability in the course category parameters, enabling a local attacker to execute arbitrary code (per the CVE description). The available sources consistently identify Chamilo LMS v1.11.18 as vulnerable; no explic...

CVE-2023-31799

The CVE-2023-31799 vulnerability affects Chamilo LMS, specifically version 1.11.18 (and 1.11.x) where the system annnouncements parameter is vulnerable to Cross Site Scripting. The underlying issue allows a local attacker to execute arbitrary code via this parameter. In the provided documents, th...

CVE-2023-31805

CVE-2023-31805 affects Chamilo Lms 1.11.18. A local authenticated attacker can execute arbitrary code via the homepage function due to a Cross Site Scripting vulnerability. The issue is documented across multiple feeds; exploitation status is not provided in the sources. Remediation, when availab...

CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function...

CVE-2023-31801

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter...

PT-2023-23465 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo Lms version 1.11.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the course category parameters. This enables the attacker to perform unauthorized actions on the system...

Chamilo LMS 跨站脚本漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v.1.11.18. A local...

CVE-2023-31801

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter...

CVE-2023-31805

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbitrary code via the homepage function...

CVE-2023-31806

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function...

CVE-2023-31802

The provided connected data confirms a Cross Site Scripting (XSS) vulnerability in Chamilo LMS v1.11.18. The issue allows a local attacker to execute arbitrary code via the skype and linedin_url parameters. No explicit root-cause or vulnerable component version details beyond the affected LMS ver...

CVE-2023-31807

CVE-2023-31807 affects Chamilo LMS up to v1.11.18. A cross-site scripting vulnerability in the Personal Notes feature can be triggered by a crafted payload, reportedly allowing a local attacker to execute arbitrary code. The available connected documents consistently describe the same issue but d...

PT-2023-23461 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo Lms version 1.11.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the forum title parameter. This enables the attacker to inject malicious scripts into the website, potentially leading...