Search
Find a vulnerability
Search criteria
4 vulnerabilities found for LMS by Chamilo
CVE-2026-112031 (GCVE-0-2026-112031)
Vulnerability from nvd – Published: 2026-10-18 23:30 – Updated: 2026-10-19 16:26 X_Open Source
VLAI
EPSS
VEX
Title
Chamilo LMS Ticket TicketManager.php addProject cross site scripting
Summary
A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 16:23 UTC
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/421679 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/421679/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112031 | third-party-advisory |
| https://vuldb.com/submit/1025429 | third-party-advisory |
| https://github.com/chamilo/chamilo-lms/security/a… | broken-link |
| https://github.com/chamilo/chamilo-lms/pull/9228 | issue-trackingpatch |
| https://github.com/chamilo/chamilo-lms/commit/cb6… | patch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Chamilo | LMS |
Affected:
1.11.0
Affected: 1.11.1 Affected: 1.11.2 Affected: 1.11.3 Affected: 1.11.4 Affected: 1.11.5 Affected: 1.11.6 Affected: 1.11.7 Affected: 1.11.8 Affected: 1.11.9 Affected: 1.11.10 Affected: 1.11.11 Affected: 1.11.12 Affected: 1.11.13 Affected: 1.11.14 Affected: 1.11.15 Affected: 1.11.16 Affected: 1.11.17 Affected: 1.11.18 Affected: 1.11.19 Affected: 1.11.20 Affected: 1.11.21 Affected: 1.11.22 Affected: 1.11.23 Affected: 1.11.24 Affected: 1.11.25 Affected: 1.11.26 Affected: 1.11.27 Affected: 1.11.28 Affected: 1.11.29 Affected: 1.11.30 Affected: 1.11.31 Affected: 1.11.32 Affected: 1.11.33 Affected: 1.11.34 Affected: 1.11.35 Affected: 1.11.36 Affected: 1.11.37 Affected: 1.11.38 Affected: 1.11.39 Affected: 1.11.40 Affected: 2.0.0 Affected: 2.0.1 Affected: 2.0.2 Affected: 2.0.3 Affected: 3.0.0 Affected: 3.0.1 cpe:2.3:a:chamilo:lms:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112031",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T16:23:29.407665Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:26:25.422Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:chamilo:lms:*:*:*:*:*:*:*:*"
],
"modules": [
"Ticket Module"
],
"product": "LMS",
"vendor": "Chamilo",
"versions": [
{
"status": "affected",
"version": "1.11.0"
},
{
"status": "affected",
"version": "1.11.1"
},
{
"status": "affected",
"version": "1.11.2"
},
{
"status": "affected",
"version": "1.11.3"
},
{
"status": "affected",
"version": "1.11.4"
},
{
"status": "affected",
"version": "1.11.5"
},
{
"status": "affected",
"version": "1.11.6"
},
{
"status": "affected",
"version": "1.11.7"
},
{
"status": "affected",
"version": "1.11.8"
},
{
"status": "affected",
"version": "1.11.9"
},
{
"status": "affected",
"version": "1.11.10"
},
{
"status": "affected",
"version": "1.11.11"
},
{
"status": "affected",
"version": "1.11.12"
},
{
"status": "affected",
"version": "1.11.13"
},
{
"status": "affected",
"version": "1.11.14"
},
{
"status": "affected",
"version": "1.11.15"
},
{
"status": "affected",
"version": "1.11.16"
},
{
"status": "affected",
"version": "1.11.17"
},
{
"status": "affected",
"version": "1.11.18"
},
{
"status": "affected",
"version": "1.11.19"
},
{
"status": "affected",
"version": "1.11.20"
},
{
"status": "affected",
"version": "1.11.21"
},
{
"status": "affected",
"version": "1.11.22"
},
{
"status": "affected",
"version": "1.11.23"
},
{
"status": "affected",
"version": "1.11.24"
},
{
"status": "affected",
"version": "1.11.25"
},
{
"status": "affected",
"version": "1.11.26"
},
{
"status": "affected",
"version": "1.11.27"
},
{
"status": "affected",
"version": "1.11.28"
},
{
"status": "affected",
"version": "1.11.29"
},
{
"status": "affected",
"version": "1.11.30"
},
{
"status": "affected",
"version": "1.11.31"
},
{
"status": "affected",
"version": "1.11.32"
},
{
"status": "affected",
"version": "1.11.33"
},
{
"status": "affected",
"version": "1.11.34"
},
{
"status": "affected",
"version": "1.11.35"
},
{
"status": "affected",
"version": "1.11.36"
},
{
"status": "affected",
"version": "1.11.37"
},
{
"status": "affected",
"version": "1.11.38"
},
{
"status": "affected",
"version": "1.11.39"
},
{
"status": "affected",
"version": "1.11.40"
},
{
"status": "affected",
"version": "2.0.0"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.0.2"
},
{
"status": "affected",
"version": "2.0.3"
},
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "M. Zaeem Shafqat (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-18T23:30:21.096Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-421679 | Chamilo LMS Ticket TicketManager.php addProject cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/421679"
},
{
"name": "VDB-421679 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/421679/cti"
},
{
"name": "CVE-2026-112031 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112031"
},
{
"name": "Submit #1025429 | Chamilo Chamilo LMS \u003c= 1.11.40 Stored XSS \u0026 HTML Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1025429"
},
{
"tags": [
"broken-link"
],
"url": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/chamilo/chamilo-lms/pull/9228"
},
{
"tags": [
"patch"
],
"url": "https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-10-18T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-18T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-18T10:01:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chamilo LMS Ticket TicketManager.php addProject cross site scripting",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112031",
"datePublished": "2026-10-18T23:30:21.096Z",
"dateReserved": "2026-10-18T07:56:11.039Z",
"dateUpdated": "2026-10-19T16:26:25.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-1106 (GCVE-0-2026-1106)
Vulnerability from nvd – Published: 2026-01-18 00:02 – Updated: 2026-02-23 08:35 X_Open Source
VLAI
EPSS
VEX
Title
Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization
Summary
A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-20 17:21 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.341698 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.341698 | signaturepermissions-required |
| https://vuldb.com/?submit.731510 | third-party-advisory |
| https://note-hxlab.wetolink.com/share/w92t1Q0a74Gj | exploit |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-1106",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-20T17:21:15.405596Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-20T17:21:22.468Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Legal Consent Handler"
],
"product": "LMS",
"vendor": "Chamilo",
"versions": [
{
"status": "affected",
"version": "2.0.0 Beta 1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "angelkate (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.5,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-23T08:35:10.532Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-341698 | Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.341698"
},
{
"name": "VDB-341698 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.341698"
},
{
"name": "Submit #731510 | Chamilo LMS \u003c= v2.0.0 Beta 1 SocialController IDOR - Legal Consent Data Manipulat",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.731510"
},
{
"tags": [
"exploit"
],
"url": "https://note-hxlab.wetolink.com/share/w92t1Q0a74Gj"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-01-17T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-01-17T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-01-19T17:48:54.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-1106",
"datePublished": "2026-01-18T00:02:09.172Z",
"dateReserved": "2026-01-17T08:37:17.795Z",
"dateUpdated": "2026-02-23T08:35:10.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112031 (GCVE-0-2026-112031)
Vulnerability from cvelistv5 – Published: 2026-10-18 23:30 – Updated: 2026-10-19 16:26 X_Open Source
VLAI
EPSS
VEX
Title
Chamilo LMS Ticket TicketManager.php addProject cross site scripting
Summary
A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 16:23 UTC
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/421679 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/421679/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-112031 | third-party-advisory |
| https://vuldb.com/submit/1025429 | third-party-advisory |
| https://github.com/chamilo/chamilo-lms/security/a… | broken-link |
| https://github.com/chamilo/chamilo-lms/pull/9228 | issue-trackingpatch |
| https://github.com/chamilo/chamilo-lms/commit/cb6… | patch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Chamilo | LMS |
Affected:
1.11.0
Affected: 1.11.1 Affected: 1.11.2 Affected: 1.11.3 Affected: 1.11.4 Affected: 1.11.5 Affected: 1.11.6 Affected: 1.11.7 Affected: 1.11.8 Affected: 1.11.9 Affected: 1.11.10 Affected: 1.11.11 Affected: 1.11.12 Affected: 1.11.13 Affected: 1.11.14 Affected: 1.11.15 Affected: 1.11.16 Affected: 1.11.17 Affected: 1.11.18 Affected: 1.11.19 Affected: 1.11.20 Affected: 1.11.21 Affected: 1.11.22 Affected: 1.11.23 Affected: 1.11.24 Affected: 1.11.25 Affected: 1.11.26 Affected: 1.11.27 Affected: 1.11.28 Affected: 1.11.29 Affected: 1.11.30 Affected: 1.11.31 Affected: 1.11.32 Affected: 1.11.33 Affected: 1.11.34 Affected: 1.11.35 Affected: 1.11.36 Affected: 1.11.37 Affected: 1.11.38 Affected: 1.11.39 Affected: 1.11.40 Affected: 2.0.0 Affected: 2.0.1 Affected: 2.0.2 Affected: 2.0.3 Affected: 3.0.0 Affected: 3.0.1 cpe:2.3:a:chamilo:lms:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-112031",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T16:23:29.407665Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T16:26:25.422Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:chamilo:lms:*:*:*:*:*:*:*:*"
],
"modules": [
"Ticket Module"
],
"product": "LMS",
"vendor": "Chamilo",
"versions": [
{
"status": "affected",
"version": "1.11.0"
},
{
"status": "affected",
"version": "1.11.1"
},
{
"status": "affected",
"version": "1.11.2"
},
{
"status": "affected",
"version": "1.11.3"
},
{
"status": "affected",
"version": "1.11.4"
},
{
"status": "affected",
"version": "1.11.5"
},
{
"status": "affected",
"version": "1.11.6"
},
{
"status": "affected",
"version": "1.11.7"
},
{
"status": "affected",
"version": "1.11.8"
},
{
"status": "affected",
"version": "1.11.9"
},
{
"status": "affected",
"version": "1.11.10"
},
{
"status": "affected",
"version": "1.11.11"
},
{
"status": "affected",
"version": "1.11.12"
},
{
"status": "affected",
"version": "1.11.13"
},
{
"status": "affected",
"version": "1.11.14"
},
{
"status": "affected",
"version": "1.11.15"
},
{
"status": "affected",
"version": "1.11.16"
},
{
"status": "affected",
"version": "1.11.17"
},
{
"status": "affected",
"version": "1.11.18"
},
{
"status": "affected",
"version": "1.11.19"
},
{
"status": "affected",
"version": "1.11.20"
},
{
"status": "affected",
"version": "1.11.21"
},
{
"status": "affected",
"version": "1.11.22"
},
{
"status": "affected",
"version": "1.11.23"
},
{
"status": "affected",
"version": "1.11.24"
},
{
"status": "affected",
"version": "1.11.25"
},
{
"status": "affected",
"version": "1.11.26"
},
{
"status": "affected",
"version": "1.11.27"
},
{
"status": "affected",
"version": "1.11.28"
},
{
"status": "affected",
"version": "1.11.29"
},
{
"status": "affected",
"version": "1.11.30"
},
{
"status": "affected",
"version": "1.11.31"
},
{
"status": "affected",
"version": "1.11.32"
},
{
"status": "affected",
"version": "1.11.33"
},
{
"status": "affected",
"version": "1.11.34"
},
{
"status": "affected",
"version": "1.11.35"
},
{
"status": "affected",
"version": "1.11.36"
},
{
"status": "affected",
"version": "1.11.37"
},
{
"status": "affected",
"version": "1.11.38"
},
{
"status": "affected",
"version": "1.11.39"
},
{
"status": "affected",
"version": "1.11.40"
},
{
"status": "affected",
"version": "2.0.0"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.0.2"
},
{
"status": "affected",
"version": "2.0.3"
},
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "M. Zaeem Shafqat (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-18T23:30:21.096Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-421679 | Chamilo LMS Ticket TicketManager.php addProject cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/421679"
},
{
"name": "VDB-421679 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/421679/cti"
},
{
"name": "CVE-2026-112031 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-112031"
},
{
"name": "Submit #1025429 | Chamilo Chamilo LMS \u003c= 1.11.40 Stored XSS \u0026 HTML Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1025429"
},
{
"tags": [
"broken-link"
],
"url": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/chamilo/chamilo-lms/pull/9228"
},
{
"tags": [
"patch"
],
"url": "https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-10-18T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-10-18T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-10-18T10:01:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chamilo LMS Ticket TicketManager.php addProject cross site scripting",
"x_generator": [
"VulDB PVTS v202610"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-112031",
"datePublished": "2026-10-18T23:30:21.096Z",
"dateReserved": "2026-10-18T07:56:11.039Z",
"dateUpdated": "2026-10-19T16:26:25.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-1106 (GCVE-0-2026-1106)
Vulnerability from cvelistv5 – Published: 2026-01-18 00:02 – Updated: 2026-02-23 08:35 X_Open Source
VLAI
EPSS
VEX
Title
Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization
Summary
A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-20 17:21 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.341698 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.341698 | signaturepermissions-required |
| https://vuldb.com/?submit.731510 | third-party-advisory |
| https://note-hxlab.wetolink.com/share/w92t1Q0a74Gj | exploit |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-1106",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-20T17:21:15.405596Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-20T17:21:22.468Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Legal Consent Handler"
],
"product": "LMS",
"vendor": "Chamilo",
"versions": [
{
"status": "affected",
"version": "2.0.0 Beta 1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "angelkate (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.5,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-23T08:35:10.532Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-341698 | Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.341698"
},
{
"name": "VDB-341698 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.341698"
},
{
"name": "Submit #731510 | Chamilo LMS \u003c= v2.0.0 Beta 1 SocialController IDOR - Legal Consent Data Manipulat",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.731510"
},
{
"tags": [
"exploit"
],
"url": "https://note-hxlab.wetolink.com/share/w92t1Q0a74Gj"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-01-17T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-01-17T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-01-19T17:48:54.000Z",
"value": "VulDB entry last update"
}
],
"title": "Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-1106",
"datePublished": "2026-01-18T00:02:09.172Z",
"dateReserved": "2026-01-17T08:37:17.795Z",
"dateUpdated": "2026-02-23T08:35:10.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}