CVE-2024-51142: XSS
Published Nov 15, 2024
·Updated
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file.
Affected Software
2 affected components
Chamilo LMS
Chamilo Chamilo LMS=1.11.26
Event History
Nov 15, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51142?
CVE-2024-51142 is rated as a high severity vulnerability due to its potential to allow arbitrary code execution via Cross Site Scripting.
2
How do I fix CVE-2024-51142?
To fix CVE-2024-51142, update Chamilo LMS to version 1.11.27 or later where the vulnerability is addressed.
3
What types of attacks are possible with CVE-2024-51142?
CVE-2024-51142 allows attackers to execute arbitrary code by injecting malicious scripts through the svkey parameter.
4
Which version of Chamilo LMS is affected by CVE-2024-51142?
CVE-2024-51142 affects Chamilo LMS version 1.11.26.
5
Is user data at risk with CVE-2024-51142?
Yes, user data can be at risk due to potential malicious code execution that could lead to data breaches.