CVE-2021-43687
Cross-site scripting in Chamilo
CVSS score
6.1
EPSS probability
%1.2
Risk score
0.1
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/chamilo/chamilo-lms/blob/v1.11.14/plugin/jcapture/applet.php
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2023-34960
Command injection in Chamilo
C
Patch status unknown Public Exploits:7EPSS %99
8.8
CVE-2026-35196
OS command injection in Chamilo Lms
C
Patch verified Public Exploits:2EPSS %3
9.8
CVE-2026-45140
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
C
Patch status unknown Public Exploits:1EPSS %1
9.8
CVE-2023-34944
Unrestricted file upload in Chamilo Lms
C
Patch verifiedEPSS %1
8.6
CVE-2026-34160
Missing authentication in Chamilo Lms
C
Patch verified Public Exploits:1EPSS %1
9.0
CVE-2026-45143
Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
C
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-43687"