CVE-2021-37389

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...

CVE-2021-37389

CVE-2021-37389 affects Chamilo 1.11.14. The vulnerability is a stored XSS in the installer paths main/install/index.php and main/install/ajax.php via the port parameter. The connected documents consistently describe this CVE as a stored XSS issue in Chamilo LMS and do not provide exploitation det...

CVE-2021-37389: Improper Neutralization of Input During Web Page Generation

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...

PT-2021-21629

Name of the Vulnerable Software and Affected Versions Chamilo version 1.11.14 Description The issue allows stored XSS via "main/install/index.php" and "main/install/ajax.php" through the port parameter. Recommendations For Chamilo version 1.11.14, as a temporary workaround, consider restricting...