CVE-2025-26153
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which e...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web gist.github.com