Description

Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends.

Remediation

References

CVE-2020-23126

Related Vulnerabilities

osTicket Other Vulnerability (CVE-2006-5407)

WordPress Plugin Marekkis Watermark Cross-Site Scripting (0.9.1)

WordPress Plugin Simple History Information Disclosure (2.7.4)

PHP Other Vulnerability (CVE-2007-4658)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17866)

Severity

Medium

Classification

CVE-2020-23126 CWE-707

Tags

Missing Update Known Vulnerabilities