CVE-2023-37066: XSS
First published: Fri Jul 07 2023(Updated: )
Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Chamilo Chamilo | >=1.11.0<=1.11.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Chamilo vulnerability?
The vulnerability ID for this Chamilo vulnerability is CVE-2023-37066.
What is the severity of CVE-2023-37066?
The severity of CVE-2023-37066 is medium (4.8).
How does CVE-2023-37066 affect Chamilo?
CVE-2023-37066 allows users with admin privilege accounts to insert XSS in the skills wheel in Chamilo 1.11.x up to 1.11.20.
What is the fix for CVE-2023-37066?
The fix for CVE-2023-37066 can be found in the following commit: [https://github.com/chamilo/chamilo-lms/commit/4f7b5ebf90c35999917c231276e47a4184275690](https://github.com/chamilo/chamilo-lms/commit/4f7b5ebf90c35999917c231276e47a4184275690)
Where can I find more information about CVE-2023-37066?
More information about CVE-2023-37066 can be found in the following link: [https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-114-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-skills](https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-114-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-skills)
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/chamilo
- canonical/chamilo chamilo
- version/chamilo chamilo/1.11.0
- version/chamilo chamilo/1.11.20