CVE-2018-20327: XSS
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebooklist.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-20327?
CVE-2018-20327 is a vulnerability in Chamilo LMS version 1.11.8 that allows authenticated users to affect other users through XSS.
What is the severity of CVE-2018-20327?
CVE-2018-20327 has a severity level of 5.4 (medium risk).
How does CVE-2018-20327 affect Chamilo LMS version 1.11.8?
CVE-2018-20327 affects Chamilo LMS version 1.11.8 by allowing authenticated users to affect other users through XSS in the gradebook dependencies tool.
How can authenticated users exploit CVE-2018-20327?
Authenticated users can exploit CVE-2018-20327 by taking advantage of specific conditions of permissions granted by administrators.
Is CVE-2018-20327 considered a high risk vulnerability?
No, CVE-2018-20327 is considered a medium risk vulnerability due to the nature of the exploit.