Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-26153
5.4
MEDIUMCVSS v3
Published
April 16, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message.
chamilo/chamilo-lms
GitHubChamilo is a learning management system focused on ease of use and accessibility
GitHubChamilo is a learning management system focused on ease of use and accessibilityNVD