Browse CVEs

HIGH 8.8 CVE-2026-30875 Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authen… Chamilo Lms 1.11.36+ Fix from $1,9502026-03-16 HIGH 8.8 CVE-2026-30881 Chamilo LMS is a learning management system. Version 1.11.34 and prior contains a SQL Injection vulnerability in the statistics AJAX endpoint. The pa… Chamilo Lms 1.11.36+ Fix from $1,9502026-03-16 MEDIUM 6.1 CVE-2026-30882 Chamilo LMS is a learning management system. Chamilo LMS version 1.11.34 and prior contains a Reflected Cross-Site Scripting (XSS) vulnerability in t… Chamilo Lms 1.11.36+ Fix from $1,6002026-03-16 MEDIUM 5.3 CVE-2026-30876 Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This is… Chamilo Lms 1.11.36+ Fix from $1,6002026-03-16 CRITICAL 9.8 CVE-2026-28430 Chamilo LMS is a learning management system. Prior to version 1.11.34, there is an unauthenticated SQL injection vulnerability which allows remote at… Chamilo Lms 1.11.34+ Fix from $2,3002026-03-16 HIGH 8.8 CVE-2026-29041 Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote code execution vulnerability ca… Chamilo Lms 1.11.34+ Fix from $1,9502026-03-06 CRITICAL 9.0 CVE-2025-59542 Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerability. By injecting malicious… Chamilo Lms 1.11.34+ Fix from $2,3002026-03-06 CRITICAL 9.0 CVE-2025-59543 Chamilo is a learning management system. Prior to version 1.11.34, there is a stored cross-site scripting (XSS) vulnerability. By injecting malicious… Chamilo Lms 1.11.34+ Fix from $2,3002026-03-06 CRITICAL 9.0 CVE-2025-55289 Chamilo is a learning management system. Prior to version 1.11.34, there is a stored XSS vulnerability in Chamilo LMS (Verison 1.11.32) allows an att… Chamilo Lms 1.11.34+ Fix from $2,3002026-03-06 HIGH 8.1 CVE-2025-59541 Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to delete pro… Chamilo Lms 1.11.34+ Fix from $1,9502026-03-06 MEDIUM 5.4 CVE-2025-59540 Chamilo is a learning management system. Prior to version 1.11.34, a stored XSS vulnerability exists in Chamilo LMS that allows a staff account to ex… Chamilo Lms 1.11.34+ Fix from $1,6002026-03-06 CRITICAL 9.0 CVE-2025-55208 Chamilo is a learning management system. Versions prior to 1.11.34 have a Stored XSS through insecure file uploads in `Social Networks`. Through it, … Chamilo Lms 1.11.34+ Fix from $2,3002026-03-05 CRITICAL 9.8 CVE-2025-52998 Chamilo is a learning management system. Prior to version 1.11.30, in the application, deserialization of data is performed, the data can be spoofed.… Chamilo Lms 1.11.30+ Fix from $2,3002026-03-02 MEDIUM 6.1 CVE-2025-52564 Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows … Chamilo Lms 1.11.30+ Fix from $1,6002026-03-02 CRITICAL 9.1 CVE-2025-50199 Chamilo is a learning management system. Prior to version 1.11.30, there is a blind SSRF vulnerability in /index.php via the POST openid_url paramete… Chamilo Lms 1.11.30+ Fix from $2,3002026-03-02 HIGH 7.1 CVE-2025-52469 Chamilo is a learning management system. Prior to version 1.11.30, a logic vulnerability in the friend request workflow of Chamilo’s social network m… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 MEDIUM 6.1 CVE-2025-52468 Chamilo is a learning management system. Prior to version 1.11.30, an input validation vulnerability exists when importing user data from CSV files. … Chamilo Lms 1.11.30+ Fix from $1,6002026-03-02 MEDIUM 6.1 CVE-2025-52475 Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability in the admin/user_li… Chamilo Lms 1.11.30+ Fix from $1,6002026-03-02 MEDIUM 6.1 CVE-2025-52476 Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to improper sani… Chamilo Lms 1.11.30+ Fix from $1,6002026-03-02 MEDIUM 6.1 CVE-2025-52563 Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting (XSS) vulnerability due to insufficient … Chamilo Lms 1.11.30+ Fix from $1,6002026-03-02 HIGH 7.2 CVE-2025-50194 Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/cron/lang/check_parse_lang… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 HIGH 7.2 CVE-2025-50195 Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/manage.co… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 HIGH 7.2 CVE-2025-50196 Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /plugin/vchamilo/views/editinsta… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 HIGH 7.2 CVE-2025-50197 Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /main/admin/sub_language_ajax.in… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 HIGH 7.2 CVE-2025-50193 Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /plugin/vchamilo/views/import.ph… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 CRITICAL 9.8 CVE-2025-50187 Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote C… Chamilo Lms 1.11.28+ Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2025-50190 Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via the GET openid.assoc_handle parameter wi… Chamilo Lms 1.11.30+ Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2025-50192 Chamilo is a learning management system. Prior to version 1.11.30, there is a time-based SQL Injection in found in /main/webservices/registration.soa… Chamilo Lms 1.11.30+ Fix from $2,3002026-03-02 HIGH 8.8 CVE-2025-50189 Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02 HIGH 8.3 CVE-2025-52482 Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users wit… Chamilo Lms 1.11.30+ Fix from $1,9502026-03-02