CVE-2023-37063: XSS
First published: Fri Jul 07 2023(Updated: )
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Chamilo Chamilo | >=1.11.0<=1.11.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Chamilo vulnerability?
The vulnerability ID for this Chamilo vulnerability is CVE-2023-37063.
What is the severity of CVE-2023-37063?
The severity of CVE-2023-37063 is medium with a severity value of 4.8.
What is the affected software version range for CVE-2023-37063?
The affected software version range for CVE-2023-37063 is Chamilo 1.11.x up to 1.11.20.
What can users with admin privilege do in Chamilo 1.11.x up to 1.11.20?
Users with admin privilege in Chamilo 1.11.x up to 1.11.20 can insert XSS in the careers & promotions management section.
How can I fix the vulnerability CVE-2023-37063 in Chamilo 1.11.x up to 1.11.20?
To fix the vulnerability CVE-2023-37063 in Chamilo 1.11.x up to 1.11.20, update to a version beyond 1.11.20.
- collector/nvd-index
- agent/weakness
- agent/tags
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/chamilo
- canonical/chamilo chamilo
- version/chamilo chamilo/1.11.0
- version/chamilo chamilo/1.11.20