CVE-2023-31806: XSS

Published May 9, 2023

Updated

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function.

Affected Software

1 affected component

Chamilo Chamilo LMS=1.11.18

Event History

May 9, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-31806?

CVE-2023-31806 is a Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 that allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function.

What is the severity of CVE-2023-31806?

CVE-2023-31806 has a severity level of medium with a severity value of 5.4.

How does CVE-2023-31806 affect Chamilo Lms version 1.11.18?

CVE-2023-31806 affects Chamilo Lms version 1.11.18 by allowing a local attacker to execute arbitrary code via a crafted payload to the My Progress function.

How can I fix CVE-2023-31806 in Chamilo Lms?

To fix CVE-2023-31806 in Chamilo Lms, it is recommended to update to a version that has addressed the vulnerability.

Where can I find more information about CVE-2023-31806?

More information about CVE-2023-31806 can be found at the Chamilo website and the Chamilo support page.