CVE-2021-37391

A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator, through main/social/search.php…

published August 10, 2021

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator, through main/social/search.php, main/inc/lib/social.lib.php and steal cookies or execute arbitrary code on the administration side via a stored XSS vulnerability via social network the send invitation feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02140 · 81.9th percentile
Published
2021-08-10T19:02Z
EPSS history
Timeline
  • 10 AUG 19:02Z
    A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator, through main/social/search.php…
    cvelistv5