CVE-2021-26746: XSS

Published Feb 19, 2021

Updated

Chamilo 1.11.14 allows XSS via a main/calendar/agendalist.php?type= URI.

Affected Software

1 affected component

Chamilo Chamilo=1.11.14

Remediation

Patch Available

https://github.com/chamilo/chamilo-lms/commit/d939402d83bf68af5377b629883d8e5437d843ec

Event History

Feb 19, 2021

CVE Published

via MITRE·04:38 AM

Data Sourced

via MITRE·04:38 AM

Description

Frequently Asked Questions

What is CVE-2021-26746?

CVE-2021-26746 is a vulnerability in Chamilo 1.11.14 that allows cross-site scripting (XSS) attacks via a main/calendar/agenda_list.php?type= URI.

What is the severity of CVE-2021-26746?

The severity of CVE-2021-26746 is medium, with a CVSS score of 6.1.

How does CVE-2021-26746 affect Chamilo 1.11.14?

CVE-2021-26746 allows XSS attacks in Chamilo 1.11.14 through the main/calendar/agenda_list.php?type= URI.

How can I fix CVE-2021-26746?

To fix CVE-2021-26746, you should update to a version of Chamilo that includes the fix, such as Chamilo 1.11.15 or later.

Where can I find more information about CVE-2021-26746?

You can find more information about CVE-2021-26746 in the references provided: [Github](https://github.com/chamilo/chamilo-lms/commit/d939402d83bf68af5377b629883d8e5437d843ec), [Chamilo Support](https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-45-2021-01-21-Moderate-impact-moderate-risk-XSS-vulnerability-in-agenda), [Netsparker](https://www.netsparker.com/web-applications-advisories/ns-21-001-cross-site-scripting-in-chamilo-lms/)