CVE-2025-52564 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows an attacker…
Medium CVSS: 6.9

CVE-2025-52564

Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows an attacker to inject arbitrary HTML, such as underlined text, via a crafted URL. This issue has been patched in version 1.11.30.
Vendor
Chamilo
Product
Chamilo Lms
CWE
CWE-80
Yayın Tarihi
2026-03-02 16:16:22
Güncelleme
2026-03-03 18:21:24
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-80 Chamilo Lms MEDIUM Chamilo 2026

Referanslar

https://github.com/chamilo/chamilo-lms/commit/083b1d2b0c29b0cc0313a28165ad47bebae9dcb2 https://github.com/chamilo/chamilo-lms/commit/1ee2d8bb61b67e08946cd80b1a9b92c1a9959c7b https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.30 https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-6fmm-qrx4-wgqc