CVE-2024-27525
Published
CVSS v3
4.6
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component.
Chamilo is a learning management system focused on ease of use and accessibility
GitHub