Low severity · published Oct 18, 2026
CVE-2026-112031
Chamilo LMS Ticket TicketManager.php addProject cross site scripting
3.5
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LM
LMS · Chamilo
1.11.0; 1.11.1; 1.11.2; 1.11.3; 1.11.4; 1.11.5; +34 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-112031
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-112031
github.com
https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa
github.com
https://github.com/chamilo/chamilo-lms/pull/9228
github.com
https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw
vuldb.com
https://vuldb.com/cve/CVE-2026-112031
vuldb.com
https://vuldb.com/submit/1025429
vuldb.com
https://vuldb.com/vuln/421679
More from LMS
5.4
CVE-2026-1106
Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization