Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2026/03/02 2:39 p.m.•45 views

CVE-2025-52482 Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...

8.3CVSS0.00388EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/03/02 2:39 p.m.•19 views

CVE-2025-52482 Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...

8.3CVSS5.7AI score0.00388EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2026/03/02 2:39 p.m.•15 views

CVE-2025-52482 Chamilo: Stored XSS in glossary function via /main/glossary/index.php trigger in /main/tracking/course_log_resources.php

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...

8.3CVSS5.7AI score0.00388EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/02 2:39 p.m.•10 views

CVE-2025-52482

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...

8.3CVSS5.7AI score0.00388EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•10 views

CVE-2025-52482: Improper Neutralization of Input During Web Page Generation

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...

8.3CVSS5.7AI score0.00388EPSS
SaveExploits1References1
Rows per page
Query Builder