2 matches found
CVE-2018-20327: Improper Neutralization of Input During Web Page Generation
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebooklist.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of t...
5.4CVSS5.8AI score0.00631EPSS
SaveExploits0References2
PT-2018-15310
Name of the Vulnerable Software and Affected Versions Chamilo LMS version 1.11.8 Description The issue affects the gradebook dependencies tool in the main/template/default/admin/gradebook list.tpl file, allowing authenticated users to impact other users under specific permission conditions grante...
5.4CVSS0.00631EPSS
SaveExploits0References5
20