| Package | Affected versions | Patched versions |
|---|---|---|
| chamilo | < 1.8.8.6 | 1.8.8.6 |
Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary web script or HTML via the category_name parameter in an addsentcategory action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free