CVE-2023-37061: XSS
Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37061?
The severity of CVE-2023-37061 is medium with a CVSS score of 4.8.
How does CVE-2023-37061 affect Chamilo?
CVE-2023-37061 affects Chamilo versions 1.11.x up to 1.11.20.
What is the vulnerability description of CVE-2023-37061?
CVE-2023-37061 allows users with an admin privilege account to insert XSS in the languages management section of Chamilo.
How can I fix CVE-2023-37061?
To fix CVE-2023-37061, update your Chamilo installation to version 1.11.21 or later.
Is there any additional information about CVE-2023-37061?
For more information about CVE-2023-37061, you can refer to the following resources: [GitHub Commit](https://github.com/chamilo/chamilo-lms/commit/75e9b3e0acac6f7a643da6ff19a00d55a94417a1) and [Chamilo Security Issues](https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-116-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-languages-management).