medium5.4
CVE-2024-51142
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file.
Impact
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chamilo | Chamilo Lms | Version 1.11.26 |