CVE-2018-20328: XSS
Chamilo LMS version 1.11.8 contains XSS in main/social/groupview.php in the social groups tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-20328?
CVE-2018-20328 is a vulnerability found in Chamilo LMS version 1.11.8 that allows authenticated users to affect other users through an XSS exploit in the social groups tool.
What is the severity of CVE-2018-20328?
The severity of CVE-2018-20328 is medium with a CVSSv3 score of 5.4.
What is the affected software of CVE-2018-20328?
The affected software of CVE-2018-20328 is Chamilo LMS version 1.11.8.
How can authenticated users exploit CVE-2018-20328?
Authenticated users can exploit CVE-2018-20328 through an XSS vulnerability in the social groups tool.
How can I fix CVE-2018-20328?
To fix CVE-2018-20328, update Chamilo LMS to a version that addresses the XSS vulnerability.