CVE-2021-37389: XSS

Published Aug 10, 2021

Updated

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.

Affected Software

1 affected component

Chamilo Chamilo=1.11.14

Event History

Aug 10, 2021

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

Description

Data Sourced

via NVD·08:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-37389?

CVE-2021-37389 is a vulnerability in Chamilo 1.11.14 that allows for stored cross-site scripting (XSS) attacks through certain parameters.

What is the severity of CVE-2021-37389?

The severity of CVE-2021-37389 is medium with a CVSS score of 6.1.

How does CVE-2021-37389 occur?

CVE-2021-37389 occurs when an attacker is able to inject malicious scripts into the 'port' parameter in main/install/index.php and main/install/ajax.php in Chamilo 1.11.14.

How can I fix CVE-2021-37389?

To fix CVE-2021-37389, it is recommended to update Chamilo to a version that includes the fix, such as the commit mentioned in the references.

What is the CWE of CVE-2021-37389?

The CWE (Common Weakness Enumeration) of CVE-2021-37389 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').