CVE-2026-112031

Chamilo LMS versions up to 1.11.40/2.0.3/3.0.1 are vulnerable to Cross-Site Scripting (XSS) within the Ticket Module . The flaw resides in the TicketManager::addProject function located in main/inc/lib/TicketManager.php, where failing to properly sanitize the Name argument allows for remote execu...