CVE-2022-27425

Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting XSS vulnerability via the component /blog/blog.php...

PT-2022-18417

Name of the Vulnerable Software and Affected Versions Chamilo LMS version 1.11.13 Description The issue is a SQL injection vulnerability. It can be exploited via the blog id parameter at the "/blog/blog.php" API endpoint. Recommendations For Chamilo LMS version 1.11.13, avoid using the blog id...

PT-2022-18418

Name of the Vulnerable Software and Affected Versions Chamilo LMS version 1.11.13 Description A cross-site scripting XSS issue was found in the /blog/blog.php component. This allows for potential malicious script execution. Recommendations For Chamilo LMS version 1.11.13, consider disabling acces...