medium4.3
CVE-2006-6857
Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the la…
Impact
Cross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Docebolms | Docebolms | All versions |