← Database

CVE-2024-51142

MEDIUM CVSS: 5.4 Published: 2024-11-15 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey parameter of the storageapi.php file.

Affected Platforms

Chamilo Chamilo Lms

Weakness Type

CWE-79

References