Security Advisory
CVE-2024-27524
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the new_ticket.php component.