CVE-2018-20328: XSS
First published: Fri Dec 21 2018(Updated: )
Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Chamilo Chamilo Lms | =1.11.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-20328?
CVE-2018-20328 is a vulnerability found in Chamilo LMS version 1.11.8 that allows authenticated users to affect other users through an XSS exploit in the social groups tool.
What is the severity of CVE-2018-20328?
The severity of CVE-2018-20328 is medium with a CVSSv3 score of 5.4.
What is the affected software of CVE-2018-20328?
The affected software of CVE-2018-20328 is Chamilo LMS version 1.11.8.
How can authenticated users exploit CVE-2018-20328?
Authenticated users can exploit CVE-2018-20328 through an XSS vulnerability in the social groups tool.
How can I fix CVE-2018-20328?
To fix CVE-2018-20328, update Chamilo LMS to a version that addresses the XSS vulnerability.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/chamilo
- canonical/chamilo chamilo lms
- version/chamilo chamilo lms/1.11.8