CVE-2026-112031
Received Received - Intake

Cross-Site Scripting in Chamilo LMS

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description
A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called 6dfa0f4de45afc1b27333304b4cd4532db478f74/dd3e4d32971efca4197eb2df97f69de25a786e3c/119773d45c31da53b44cbfdb3f4910bc983cc7b0/cb6fe2127e587603451c609b4ed78c0293fcc3fa. It is best practice to apply a patch to resolve this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112031
EUVD
EUVD-2026-104022

Affected Vendors & Products

Showing 47 associated CPEs
Vendor Product Version / Range
Chamilo LMS 1.11.0
Chamilo LMS 1.11.1
Chamilo LMS 1.11.2
Chamilo LMS 1.11.3
Chamilo LMS 1.11.4
Chamilo LMS 1.11.5
Chamilo LMS 1.11.6
Chamilo LMS 1.11.7
Chamilo LMS 1.11.8
Chamilo LMS 1.11.9
Chamilo LMS 1.11.10
Chamilo LMS 1.11.11
Chamilo LMS 1.11.12
Chamilo LMS 1.11.13
Chamilo LMS 1.11.14
Chamilo LMS 1.11.15
Chamilo LMS 1.11.16
Chamilo LMS 1.11.17
Chamilo LMS 1.11.18
Chamilo LMS 1.11.19
Chamilo LMS 1.11.20
Chamilo LMS 1.11.21
Chamilo LMS 1.11.22
Chamilo LMS 1.11.23
Chamilo LMS 1.11.24
Chamilo LMS 1.11.25
Chamilo LMS 1.11.26
Chamilo LMS 1.11.27
Chamilo LMS 1.11.28
Chamilo LMS 1.11.29
Chamilo LMS 1.11.30
Chamilo LMS 1.11.31
Chamilo LMS 1.11.32
Chamilo LMS 1.11.33
Chamilo LMS 1.11.34
Chamilo LMS 1.11.35
Chamilo LMS 1.11.36
Chamilo LMS 1.11.37
Chamilo LMS 1.11.38
Chamilo LMS 1.11.39
Chamilo LMS 1.11.40
Chamilo LMS 2.0.0
Chamilo LMS 2.0.1
Chamilo LMS 2.0.2
Chamilo LMS 2.0.3
Chamilo LMS 3.0.0
Chamilo LMS 3.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-112031 is a Cross-Site Scripting (XSS) vulnerability in Chamilo LMS versions up to 1.11.40/2.0.3/3.0.1. It affects the TicketManager::addProject function in the Ticket Module. Attackers can manipulate the Name argument to inject malicious scripts, which may execute in users' browsers. The issue was fixed in a patch released on October 15, 2026.

Detection Guidance

To detect this XSS vulnerability in Chamilo LMS, inspect the TicketManager.php file for improper input handling in the TicketManager::addProject function. Check if user-controlled 'Name' arguments are properly sanitized before rendering. Use grep commands like 'grep -r "TicketManager::addProject" /path/to/chamilo/' to locate the vulnerable code.

Impact Analysis

This vulnerability allows attackers to inject malicious scripts into web pages viewed by users. If exploited, it could lead to theft of session cookies, account takeover, or defacement of the website. Users with access to the LMS could unknowingly execute harmful scripts while interacting with the platform.

Compliance Impact

This vulnerability, which allows cross-site scripting (XSS) via manipulated input in Chamilo LMS, could potentially expose sensitive user data. XSS flaws may enable attackers to steal session tokens, credentials, or other personal information, which could violate GDPR's data protection requirements or HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies
  • Update Chamilo LMS to version 1.11.40, 2.0.3, or 3.0.1 or later to apply the security patches addressing XSS vulnerabilities.
  • Review and apply the specific patch mentioned in the CVE description to the TicketManager.php file to prevent manipulation of the Name argument.
  • Inspect and sanitize user-controlled inputs in components like forum threads, ticket settings, chat contacts, course categories, and user information fields to ensure proper escaping of HTML content.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112031. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart