CVE-2021-38745

Published: 2022-03-21T21:15Z

Last Modified: 2024-11-21T06:18Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt