VYPR
← All advisories
Medium severity5.4OSV Advisory· Published Dec 21, 2018· Updated Jun 17, 2026

CVE-2018-20328

CVE-2018-20328

Description

Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Chamilo/LmsOSV3 versions
    CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …+ 2 more
    • (no CPE)range: CHAMILO_1_8_7_ALPHA_1, CHAMILO_1_8_7_ALPHA_2, CHAMILO_1_8_7_RC2, …
    • cpe:2.3:a:chamilo:chamilo_lms:1.11.8:*:*:*:*:*:*:*
    • (no CPE)range: <1.11.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.