What’s Vulnerable › Products
chamilo-lms vulnerabilities
131 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 87 published in the last 12 months.
Check whether your chamilo-lms version is affected
Latest chamilo-lms vulnerabilities
- CVE-2026-114390 — Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers (CVSS 5.3)
- CVE-2026-114389 — Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade (CVSS 4.3)
- CVE-2026-114388 — Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController (CVSS 5.3)
- CVE-2026-112031 — Chamilo LMS Ticket TicketManager.php addProject cross site scripting (CVSS 3.5)
- CVE-2026-45143 — Chamilo LMS: Student-to-admin stored XSS in private messages via v-html (CVSS 9.0)
- CVE-2026-45140 — Chamilo LMS CStudio upload flow allows unauthenticated remote code execution (CVSS 9.8)
- CVE-2026-82535 — Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php (CVSS 6.1)
- CVE-2026-39878 — Chamilo stored XSS via user registration leads to admin account takeover (CVSS 9.3)
- CVE-2026-34239 — Chamilo Authenticated Remote Code Execution (CVSS 7.5)
- CVE-2026-40291 — Chamilo LMS has Privilege Escalation via API User Role Modification (CVSS 8.8)
- CVE-2026-35196 — Chamilo LMS has OS Command Injection via export_all_certificates action (CVSS 8.8)
- CVE-2026-34602 — Chamilo LMS: IDOR in /api/course_rel_users Allows Unauthorized Enrollment of Arbitrary Users into Courses (CVSS 7.1)
- CVE-2026-34370 — Chamilo LMS: IDOR in the Notebook Module allows an attacker to view other users' private notes (CVSS 6.5)
- CVE-2026-34161 — Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution (CVSS 5.4)
- CVE-2026-34160 — Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services (CVSS 8.6)
- CVE-2026-33715 — Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action (CVSS 7.2)
- CVE-2026-33714 — Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2) (CVSS 7.2)
- CVE-2026-33737 — Chamilo LMS has an XML External Entity (XXE) Injection (CVSS 6.5)
- CVE-2026-33736 — Chamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure (CVSS 6.5)
- CVE-2026-33710 — Chamilo LMS has Weak REST API Key Generation (Predictable) (CVSS 7.5)
- CVE-2026-33708 — Chamilo LMS has REST API PII Exposure via get_user_info_from_username (CVSS 6.5)
- CVE-2026-33707 — Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms (CVSS 9.8)
- CVE-2026-33706 — Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher) (CVSS 7.1)
- CVE-2026-33705 — Chamilo LMS has unauthenticated access to Twig template source files exposes application logic (CVSS 5.3)
- CVE-2026-33704 — Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint (CVSS 8.8)