CVE-2024-4367-POC-PDFJS

CVE 2024 4367: PoC pour l'exploitation de XSS Cross-Site Scripting 1. Displaying an Alert XSS Trigger Another exploitation example consists of injecting a simple alert message to check if the attack works. python poc.py "alert'XSS exploit triggered';" Explanation : This code injects an alert...

CVE-2026-45144 Chamilo LMS: Stored XSS in public user-profile fields

Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, GET /user/username is anonymously reachable and renders six user-editable profile fields firstname, lastname, competences, openarea, teach, and diplomas inside % autoescape false %, without server-side sanitization ...

CVE-2026-45144

The Chamilo LMS learning management system (versions 2.0.0 through 2.0.1 ) contains a Stored XSS vulnerability within public user-profile fields. The root cause is the lack of server-side sanitization on the write path for six editable fields (firstname, lastname, competences, openarea, teach, an...