What is GHSA-3xmg-78j5-xfw9?

GHSA-3xmg-78j5-xfw9 is a security advisory published by GitHub Security Advisories with Medium severity. chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin...

Which CVE IDs does GHSA-3xmg-78j5-xfw9 cover?

GHSA-3xmg-78j5-xfw9 covers the following CVE IDs: CVE-2021-43687. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3xmg-78j5-xfw9?

GHSA-3xmg-78j5-xfw9 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-3xmg-78j5-xfw9MediumCVSS 6.1

chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin...

Vendor

GitHub Security Advisories

Published

December 2, 2021

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2021-43687 →

📋 Description

chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2021-43687
https://github.com/chamilo/chamilo-lms/blob/v1.11.14/plugin/jcapture/applet.php
https://github.com/chamilo/chamilo-lms/tree/v1.11.14
http://chamilo-lms.com
https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-92-2021-11-12-Low-impact-Low-risk-XSS-Vulnerability-in-jCapture-plugin-CVE-2021-43687
https://github.com/advisories/GHSA-3xmg-78j5-xfw9