Skip to content
OpenAdvisories
Unscored CVE-2021-37389 EUVD-2021-23958GHSA-pqwj-p67x-f5r3

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.

Published Aug 10, 2021 · Updated Aug 4, 2024 · Assigned by mitre