PT-2026-133605

Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1, GET /user/username is anonymously reachable and renders six user-editable profile fields firstname, lastname, competences, openarea, teach, and diplomas inside % autoescape false %, without server-side sanitization ...