Lucene search
K

6 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/02 3:49 p.m.2 views

CVE-2025-52475

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability in the admin/userlist.php endpoint. The keywordinactive parameter is not properly sanitized, allowing attackers to inject malicious JavaScript through a crafted URL. This...

6.1CVSS5.7AI score0.00041EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/03/02 3:49 p.m.2 views

EUVD-2025-208176

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability in the admin/userlist.php endpoint. The keywordinactive parameter is not properly sanitized, allowing attackers to inject malicious JavaScript through a crafted URL. This...

5.1CVSS5.7AI score0.00041EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/02 3:49 p.m.27 views

CVE-2025-52475 Chamilo: Reflected XSS via keyword_inactive parameter

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability in the admin/userlist.php endpoint. The keywordinactive parameter is not properly sanitized, allowing attackers to inject malicious JavaScript through a crafted URL. This...

5.1CVSS0.00041EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/02 3:49 p.m.3 views

CVE-2025-52475 Chamilo: Reflected XSS via keyword_inactive parameter

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability in the admin/userlist.php endpoint. The keywordinactive parameter is not properly sanitized, allowing attackers to inject malicious JavaScript through a crafted URL. This...

5.1CVSS5.7AI score0.00041EPSS
Exploits0References3
OSV
OSV
added 2026/03/02 3:49 p.m.4 views

CVE-2025-52475 Chamilo: Reflected XSS via keyword_inactive parameter

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability in the admin/userlist.php endpoint. The keywordinactive parameter is not properly sanitized, allowing attackers to inject malicious JavaScript through a crafted URL. This...

5.1CVSS5.7AI score0.00041EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/03/02 12:0 a.m.2 views

Chamilo 跨站脚本漏洞

Chamilo is an open-source learning management system developed by Chamilo. Versions of Chamilo prior to 1.11.30 had a cross-site scripting vulnerability. This vulnerability stemmed from improper cleaning of the keywordinactive parameter in the admin/userlist.php file, which could lead to...

6.1CVSS5.6AI score0.00041EPSS
Exploits0References3
Rows per page
Query Builder