{
"id": "GHSA-wmrg-883r-jcp6",
"aliases": [
"CVE-2021-35415"
],
"details": "A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course \"Title\" and \"Content\" fields.",
"affected": [],
"modified": "2021-12-07T00:00:49Z",
"severity": [],
"published": "2021-12-04T00:00:50Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35415",
"type": "ADVISORY"
},
{
"url": "https://github.com/chamilo/chamilo-lms/commit/19189a91d1eac9aa204b9439b82e3e73c8ac2e03",
"type": "WEB"
},
{
"url": "https://github.com/chamilo/chamilo-lms/commit/cf84be1ca1d9a08ad1341dfbf8df475b13a89072",
"type": "WEB"
},
{
"url": "https://github.com/chamilo/chamilo-lms/commit/fd54f6194285f949c86060d3b2a7967b43689480",
"type": "WEB"
},
{
"url": "https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#multiple-stored-cross-site-scripting-vulnerabilities",
"type": "WEB"
},
{
"url": "https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-61-2021-05-14-Low-impact-very-low-risk-XSS-in-course-name",
"type": "WEB"
},
{
"url": "https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-62-2021-05-14-Low-impact-low-risk-XSS-in-course-description",
"type": "WEB"
},
{
"url": "https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-63-2021-05-14-Low-impact-moderate-risk-XSS-in-course-documents",
"type": "WEB"
},
{
"url": "https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-64-2021-05-14-Low-impact-low-risk-XSS-in-course-document-title-on-upload",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"nvd_published_at": "2021-12-03T22:15:00Z",
"github_reviewed_at": null
}
}