CVE-2025-55208
Chamilo is a learning management system. Versions prior to 1.11.34 have a Stored XSS through insecure file uploads in `Social Networks`. Through it, a low-privilege user can execute arbitrary code in the admin user inbox, allowing takeover of the admin account. Version 1.11.34 fixes the issue.
Vendor
Product
CWE
Yayın Tarihi
2026-03-05 21:16:13
Güncelleme
2026-03-09 20:20:00
Source Identifier
security-advisories@github.com
KEV Date Added
-