Chamilo Chamilo-Lms vulnerabilities

CVE-2025-52468 [MEDIUM] CWE-79 CVE-2025-52468: Chamilo is a learning management system. Prior to version 1.11.30, an input validation vulnerability Chamilo is a learning management system. Prior to version 1.11.30, an input validation vulnerability exists when importing user data from CSV files. This flaw occurs due to insufficient sanitization of user data, specifically in the "Last Name", "First Name", and "Username" fields. It allows attackers to inject a stored cross-site scripting (XSS) pay

CVE-2025-59540 [MEDIUM] CWE-79 CVE-2025-59540: Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to execute arbitrary JavaScript in the browser of higher-privileged admin users. The issue arises because feedback input in the exercise history page is not properly encoded before rendering, allowing malicio

CVE-2025-50198 [MEDIUM] CWE-502 CVE-2025-50198: Chamilo is a learning management system. Prior to version 1.11.30, Chamilo is vulnerable to deserial Chamilo is a learning management system. Prior to version 1.11.30, Chamilo is vulnerable to deserialization of untrusted data in /plugin/vchamilo/views/import.php via POST configuration_file; POST course_path; POST home_path parameters. This issue has been patched in version 1.11.30.

CVE-2026-30876 [MEDIUM] CWE-204 CVE-2026-30876: Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

CVE-2026-30882 [MEDIUM] CWE-79 CVE-2026-30882: Chamilo LMS is a learning management system. Chamilo LMS version 1.11.34 and prior contains a Reflec Chamilo LMS is a learning management system. Chamilo LMS version 1.11.34 and prior contains a Reflected Cross-Site Scripting (XSS) vulnerability in the session category listing page. The keyword parameter from $_REQUEST is echoed directly into an HTML href attribute without any encoding or sanitization. An attacker can inject arbitrary HTML/JavaScrip

CVE-2025-52475 [MEDIUM] CWE-79 CVE-2025-52475: Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site s Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability in the admin/user_list.php endpoint. The keyword_inactive parameter is not properly sanitized, allowing attackers to inject malicious JavaScript through a crafted URL. This issue has been patched in version 1.11.30.

CVE-2025-52476 [MEDIUM] CWE-79 CVE-2025-52476: Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site s Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to improper sanitization of the keyword_active parameter in admin/user_list.php. This issue has been patched in version 1.11.30.

CVE-2025-52563 [MEDIUM] CWE-79 CVE-2025-52563: Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site s Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to insufficient sanitization of the page parameter in the session/add_users_to_session.php endpoint. This issue has been patched in version 1.11.30.

CVE-2026-32893 [MEDIUM] CWE-79 CVE-2026-32893: Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, a Reflected Cross-Site Scripting ( Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, a Reflected Cross-Site Scripting (XSS) vulnerability in the exercise question list admin panel allows an attacker to execute arbitrary JavaScript in an authenticated teacher's browser. The pagination code merges all $_GET parameters via array_merge() and outputs the result via http_bui

CVE-2025-50186 [MEDIUM] CWE-79 CVE-2025-50186: Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XS Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exists due to insufficient sanitization of CSV filenames. An attacker can upload a maliciously named CSV file (e.g., .csv) that leads to JavaScript execution when viewed by administrators or users with access to import logs or file vie

CVE-2025-66447 [MEDIUM] CWE-601 CVE-2025-66447: Chamilo LMS is a learning management system. From 1.11.0 to 2.0-beta.1, anyone can trigger a malicio Chamilo LMS is a learning management system. From 1.11.0 to 2.0-beta.1, anyone can trigger a malicious redirect through the use of the redirect parameter to /login. This vulnerability is fixed in 2.0-beta.2.

CVE-2025-59544 [MEDIUM] CWE-862 CVE-2025-59544: Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to Chamilo is a learning management system. Prior to version 1.11.34, the functionality for the user to update the category does not implement authorization checks for the "category_id" parameter which allows users to update the category of any user by replacing the "category_id" parameter. This issue has been patched in version 1.11.34.

CVE-2025-52470 [MEDIUM] CWE-79 CVE-2025-52470: Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XS Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exists in the session_category_add.php script. The vulnerability is caused by improper sanitization of the Category Name field, allowing privileged users to inject persistent JavaScript payloads. The injected script is later executed w