Chamilo LMS version 1.11.8 suffers from a cross site scripting vulnerability in the firstname variable. Continue reading...