Login Request a demo
CH
Vendor
chamilo
3 products with CVEs on record
157
CVEs
0
On KEV
4
New 30D
Products
CH
chamilo-lms
chamilo
9.8
130 CVEs0 on KEV3 new
LM
LMS
Chamilo
3.5
1 CVEs0 on KEV1 new
CH
Chamilo
Chamilo
9.8
26 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114390
CH
chamilo-lms
chamilo
5.3
0%
Oct 21Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers
CVE-2026-114389
CH
chamilo-lms
chamilo
4.3
0%
Oct 21Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade
CVE-2026-114388
CH
chamilo-lms
chamilo
5.3
0%
Oct 21Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController
CVE-2026-112031
LM
LMS
Chamilo
3.5
0%
Oct 18Chamilo LMS Ticket TicketManager.php addProject cross site scripting
CVE-2026-45140
CH
chamilo-lms
chamilo
9.8
1%
Sep 17Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
CVE-2026-45143
CH
chamilo-lms
chamilo
9.0
0%
Sep 17Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
CVE-2026-82535
CH
chamilo-lms
chamilo
6.1
0%
Sep 11Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php
CVE-2026-34239
CH
chamilo-lms
chamilo
7.5
0%
Jul 20Chamilo Authenticated Remote Code Execution
CVE-2026-39878
CH
chamilo-lms
chamilo
9.3
0%
Jul 20Chamilo stored XSS via user registration leads to admin account takeover
CVE-2026-40291
CH
chamilo-lms
chamilo
8.8
0%
Apr 14Chamilo LMS has Privilege Escalation via API User Role Modification
CVE-2026-35196
CH
chamilo-lms
chamilo
8.8
2%
Apr 14Chamilo LMS has OS Command Injection via export_all_certificates action
CVE-2026-34602
CH
chamilo-lms
chamilo
7.1
0%
Apr 14Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courses
CVE-2026-34370
CH
chamilo-lms
chamilo
6.5
0%
Apr 14Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes
CVE-2026-34161
CH
chamilo-lms
chamilo
5.4
0%
Apr 14Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution
CVE-2026-34160
CH
chamilo-lms
chamilo
8.6
0%
Apr 14Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services
CVE-2026-33715
CH
chamilo-lms
chamilo
7.2
0%
Apr 14Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action
CVE-2026-33714
CH
chamilo-lms
chamilo
7.2
0%
Apr 14Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2)
CVE-2026-33737
CH
chamilo-lms
chamilo
6.5
0%
Apr 10Chamilo LMS has an XML External Entity (XXE) Injection
CVE-2026-33736
CH
chamilo-lms
chamilo
6.5
0%
Apr 10Chamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure
CVE-2026-33710
CH
chamilo-lms
chamilo
7.5
0%
Apr 10Chamilo LMS has Weak REST API Key Generation (Predictable)
CVE-2026-33708
CH
chamilo-lms
chamilo
6.5
0%
Apr 10Chamilo LMS has REST API PII Exposure via get_user_info_from_username
CVE-2026-33707
CH
chamilo-lms
chamilo
9.8
0%
Apr 10Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
CVE-2026-33706
CH
chamilo-lms
chamilo
7.1
0%
Apr 10Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher)
CVE-2026-33705
CH
chamilo-lms
chamilo
5.3
0%
Apr 10Chamilo LMS has unauthenticated access to Twig template source files exposes application logic
CVE-2026-33704
CH
chamilo-lms
chamilo
8.8
0%
Apr 10Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint
CVE-2026-33703
CH
chamilo-lms
chamilo
6.5
0%
Apr 10Chamilo LMS Critical IDOR: Any Authenticated User Can Extract All Users’ Personal Data and API Tokens
CVE-2026-33702
CH
chamilo-lms
chamilo
7.1
0%
Apr 10Chamilo LMS has an Insecure Direct Object Reference (IDOR)
CVE-2026-33698
CH
chamilo-lms
chamilo
9.8
0%
Apr 10Chamilo LMS affected by unauthenticated RCE in main/install folder
CVE-2026-33618
CH
chamilo-lms
chamilo
8.8
0%
Apr 10Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings
CVE-2026-33141
CH
chamilo-lms
chamilo
6.5
0%
Apr 10Chamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning Data
CVE-2026-32892
CH
chamilo-lms
chamilo
8.8
2%
Apr 10OS Command Injection in Chamilo LMS 1.11.36
CVE-2026-32932
CH
chamilo-lms
chamilo
6.1
0%
Apr 10Chamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit
CVE-2026-32931
CH
chamilo-lms
chamilo
8.8
0%
Apr 10Chamilo LMS has Arbitrary File Upload via MIME-Only Validation in Exercise Sound Upload Leads to RCE
CVE-2026-32930
CH
chamilo-lms
chamilo
7.1
0%
Apr 10Chamilo LMS has an IDOR in Gradebook Allows Cross-Course Evaluation Edit Without Ownership Check
CVE-2026-32894
CH
chamilo-lms
chamilo
7.1
0%
Apr 10Chamilo LMS has an IDOR in Gradebook Allows Cross-Course Deletion of Any Student's Grade Result
CVE-2026-32893
CH
chamilo-lms
chamilo
5.4
0%
Apr 10Chamilo LMS has Reflected XSS via Unsanitized http_build_query() in Exercise Question List Pagination
CVE-2026-31941
CH
chamilo-lms
chamilo
6.5
0%
Apr 10Server-Side Request Forgery (SSRF) in Chamilo LMS
CVE-2026-31940
CH
chamilo-lms
chamilo
8.8
0%
Apr 10Session Fixation in Chamilo LMS
CVE-2026-31939
CH
chamilo-lms
chamilo
8.3
0%
Apr 10Path Traversal (Arbitrary File Delete) in Chamilo LMS
CVE-2025-66447
CH
chamilo-lms
chamilo
4.7
0%
Apr 10Chamilo LMS has validation-less redirect on login page
CVE-2026-30882
CH
chamilo-lms
chamilo
6.1
0%
Mar 16Chamilo LMS: Reflected XSS in the session category listing page
CVE-2026-30881
CH
chamilo-lms
chamilo
8.8
0%
Mar 16Chamilo LMS: SQL Injection in the statistics AJAX endpoint
CVE-2026-30876
CH
chamilo-lms
chamilo
5.3
0%
Mar 16Chamilo LMS: User enumeration vulnerability via response
CVE-2026-30875
CH
chamilo-lms
chamilo
8.8
1%
Mar 16Chamilo LMS: Authenticated RCE via H5P Import
CVE-2026-28430
CH
chamilo-lms
chamilo
9.8
0%
Mar 16Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php
CVE-2026-29041
CL
Chamilo Lms
Chamilo
8.8
1%
Mar 6Chamilo is a learning management system
CVE-2025-59544
CL
Chamilo Lms
Chamilo
4.3
0%
Mar 6Chamilo is a learning management system
CVE-2025-59543
CL
Chamilo Lms
Chamilo
9.0
0%
Mar 6Chamilo is a learning management system
CVE-2025-59542
CL
Chamilo Lms
Chamilo
9.0
0%
Mar 6Chamilo is a learning management system
CVE-2025-59541
CL
Chamilo Lms
Chamilo
8.1
0%
Mar 6Chamilo is a learning management system
CVE-2025-59540
CL
Chamilo Lms
Chamilo
5.4
0%
Mar 6Chamilo is a learning management system
CVE-2025-55289
CL
Chamilo Lms
Chamilo
9.0
0%
Mar 6Chamilo is a learning management system
CVE-2025-55208
CL
Chamilo Lms
Chamilo
9.0
0%
Mar 5Chamilo is a learning management system
CVE-2025-52998
CL
Chamilo Lms
Chamilo
9.8
0%
Mar 2Chamilo is a learning management system
CVE-2025-52564
CL
Chamilo Lms
Chamilo
6.1
0%
Mar 2Chamilo is a learning management system
CVE-2025-52563
CL
Chamilo Lms
Chamilo
6.1
0%
Mar 2Chamilo is a learning management system
CVE-2025-52476
CL
Chamilo Lms
Chamilo
6.1
0%
Mar 2Chamilo is a learning management system
CVE-2025-52475
CL
Chamilo Lms
Chamilo
6.1
0%
Mar 2Chamilo is a learning management system
CVE-2025-52470
CL
Chamilo Lms
Chamilo
4.8
0%
Mar 2Chamilo is a learning management system
CVE-2025-52469
CL
Chamilo Lms
Chamilo
7.1
0%
Mar 2Chamilo is a learning management system