VULNERABILITY INTELLIGENCE

CVE-2024-30618

CVSS score6.1 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2024-11-04

Last modified2026-06-17

Description

A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by including a malicious payload in the 'content' parameter of 'group_topics.php'.