CVE-2021-37390

A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI social network search feature...

CVE-2021-37390: Improper Neutralization of Input During Web Page Generation

A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI social network search feature...

PT-2021-21630

Name of the Vulnerable Software and Affected Versions Chamilo LMS version 1.11.14 Description A reflected XSS issue exists in the social network search feature, specifically in the "main/social/search.php" endpoint with the q URI parameter. This allows for potential exploitation. Recommendations...

CVE-2021-37391: Improper Neutralization of Input During Web Page Generation

A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator, through main/social/search.php, main/inc/lib/social.lib.php and steal cookies or execute arbitrary code on the administration side via a stored XSS vulnerability via social...

PT-2021-3968

Name of the Vulnerable Software and Affected Versions Chamilo LMS version 1.11.14 Description The issue allows a user without privileges to send an invitation message to another user, such as the administrator, through main/social/search.php and main/inc/lib/social.lib.php, potentially stealing...