Vulnerabilities > Chamilo > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-12-21 CVE-2018-20327 Cross-site Scripting vulnerability in Chamilo LMS 1.11.8
Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators.
network
low complexity
chamilo CWE-79
5.4