← All advisories

Medium severity6.1NVD Advisory· Published Aug 10, 2021· Updated Jun 17, 2026

CVE-2021-37389

CVE-2021-37389

Description

Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Chamilo/Chamilo
cpe:2.3:a:chamilo:chamilo:1.11.14:*:*:*:*:*:*:*
Chamilo/Chamilodescription
Chamilo/Lmsllm-fuzzy
Range: 1.11.14

Patches

Vulnerability mechanics

References

2

github.com/chamilo/chamilo-lms/commit/dfae49f5dc392c00cd43badcb3043db3a646ff0cnvdPatchThird Party Advisory
gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilitiesnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.