CVE-2023-37064 in LMS

Sumário

de MITRE • 07/07/2023

Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 28/06/2023
• Divulgação: 07/07/2023
• Moderação: aceite
• Entrada: VDB-233336
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.8 (NVD)
• EPSS: 0.00384
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider, Agriculture, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-37064
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-37064
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-37064/