CVE-2023-34961

MediumCVSS 6.1

Published: 08/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

31th percentile - higher than 31% of all known CVEs

Versions of Chamilo v1.11.x up to v1.11.18 were found to contain a cross-site scripting (XSS) vulnerability via the /feedback/comment field.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to the latest version of Chamilo to mitigate this vulnerability.

Original NVD description (English source)

Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the /feedback/comment field.