CVE-2023-31800: XSS

Published May 9, 2023

Updated

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter.

Affected Software

1 affected component

Chamilo Chamilo LMS=1.11.18

Event History

May 9, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-31800?

The severity of CVE-2023-31800 is medium.

How does the Cross Site Scripting vulnerability in Chamilo Lms v.1.11.18 occur?

The Cross Site Scripting vulnerability in Chamilo Lms v.1.11.18 occurs due to improper validation of the forum title parameter.

How can a local attacker exploit CVE-2023-31800?

A local attacker can exploit CVE-2023-31800 by executing arbitrary code through the forum title parameter.

What is the recommended version of Chamilo LMS to fix the CVE-2023-31800 vulnerability?

To fix the CVE-2023-31800 vulnerability, it is recommended to upgrade to Chamilo LMS version 1.11.19 or later.

Where can I find more information about the CVE-2023-31800 vulnerability?

More information about the CVE-2023-31800 vulnerability can be found at http://chamilo.com and https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-102-2023-04-11-Low-impact-Moderate-risk-XSS-in-forum-titles.