CVE-2018-20327: XSS
First published: Fri Dec 21 2018(Updated: )
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Chamilo Chamilo Lms | =1.11.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-20327?
CVE-2018-20327 is a vulnerability in Chamilo LMS version 1.11.8 that allows authenticated users to affect other users through XSS.
What is the severity of CVE-2018-20327?
CVE-2018-20327 has a severity level of 5.4 (medium risk).
How does CVE-2018-20327 affect Chamilo LMS version 1.11.8?
CVE-2018-20327 affects Chamilo LMS version 1.11.8 by allowing authenticated users to affect other users through XSS in the gradebook dependencies tool.
How can authenticated users exploit CVE-2018-20327?
Authenticated users can exploit CVE-2018-20327 by taking advantage of specific conditions of permissions granted by administrators.
Is CVE-2018-20327 considered a high risk vulnerability?
No, CVE-2018-20327 is considered a medium risk vulnerability due to the nature of the exploit.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/chamilo
- canonical/chamilo chamilo lms
- version/chamilo chamilo lms/1.11.8